Hacker breaks into BAYC’s official Instagram account to steal Yuga Labs NFTs
A hacker broke into the official Bored Ape Yacht Club (BAYC) Instagram account and thieved 13 Yuga Labs NFTs worth $2.8 million on April 25.
The hacker sent a phishing post that promised “mint land” on Yuga Labs’ upcoming metaverse to all BAYC Instagram followers.
Enticed by the reward, the victims connected their crypto wallets to the hacker’s “smart contract”, enabling the cyberpunk to seize control of Yuga Labs NFTs, including BAYC.
Yuga Labs took to Twitter to warn members about the fraudulent activity:
“There is no mint going on today. It looks like BAYC Instagram was hacked. Do not mint anything, click links or link your wallet to anything.”
According to Etherscan, the hacker’s wallet stored 91 stolen digital assets. The missing NFTs owned by Yuga Labs included six Mutant Apes, four Bored Apes and three Bored Ape Kennel Clubs.
Despite rooting out the hacker, Yuga Labs and Instagram continue to raise questions regarding where the issues lie.
Many online reports and Tweets claim the fraudster stole more than 50 Bored Apes and Mutant Apes—falsely stating the hacker took $13 million worth of Yuga Labs NFTs rather than $2.8 million.
Following this, the co-founder of BAYC, Garga, says only 13 NFTs were stolen via Twitter:
“The IG hack resulted in 4 Apes, 6 Mutants, 3 Kennels, and some other assorted valuable NFTs being lost. We will be in contact with the users affected and will post a full postmortem on the attack when we can. For now, I would like to stress that 2FA was enabled on the account.”
For extra security purposes, Garga recommends Discord users turn off their DMs due to “mfrs bots sending scam links the moment a server is approved.”
Subscribe to the NFT Lately newsletter to receive news covering the latest NFT drops, releases, reviews and more.