Polygon Regains Control of Community Discord

Polygon MATIC (+0.89%) has regained control of its community Discord after it was hijacked for about four hours on Saturday morning, leading to the alleged theft of approximately $145,000 in assets from one user.

“We have regained access and secured the Polygon community Discord server. All external bots and integrations have been disabled while we perform a security review to prevent this from happening again,” Polygon stated on X.

A fraudulent message was posted to the Polygon Discord around 5 am GMT, seemingly from the account of its community lead Smokey. This message promoted a “special pre-migration” airdrop ahead of the Polygon network’s migration from its native MATIC token to the upgraded POL token scheduled for September 4, along with a phishing link.

At least one user claims to have fallen victim to the attack. Blockchain data corroborates their assertion of losing a Uniswap position worth about $145,000 in the incident. The transfer occurred approximately 40 minutes after Polygon’s chief information security officer, Mudit Gupta, warned the community about the hack in a post on X, later reposted by Polygon’s X account.

The wallet address that received the Uniswap position, presumably linked to the hacker, appears to have targeted other victims in the past. Ten days ago, it transferred ether worth $72,300 to a wallet flagged by Etherscan for phishing; this wallet now holds nearly $400,000 in assets. Five days ago, it transferred $29,500 worth of ether to another similarly flagged wallet with $150,000 in assets.

Polygon’s team remains uncertain about how its Discord was compromised. “At this moment, we don’t believe any of our mods were phished. It seems more likely that a bot/integration we had was compromised. We are still reviewing the logs,” Gupta shared on X. He also mentioned that a postmortem will be released following a thorough review of the hack.

Polygon did not immediately respond to The Block’s request for comment.