'Blockchain City' CityDAO Falls Victim to $95K Hack via Discord

The attacker issued a fake "land drop" from the admin's compromised account, pocketing 29.67 ETH ($95,000) in the process.

AccessTimeIconJan 14, 2022 at 2:42 p.m. UTC
Updated May 11, 2023 at 4:12 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

CityDAO, the experiment into decentralized land ownership, has fallen victim to a $95,000 hack by fraudsters on gaming instant messaging site Discord.

  • An attacker hacked one of the project's admin accounts on Discord, according to the group's Twitter account.
  • "EMERGENCY NOTICE. A CityDAO Discord admin account has been hacked. THERE IS NO LAND DROP. DO NOT CONNECT YOUR WALLET," CityDAO tweeted Monday.
  • CityDAO's founders purchased 40 acres of land in Wyoming in November with the intention of building a "blockchain city."
  • The project's aim is to build a city with decentralized governance, where "citizens" purchase land in the form of non-fungible tokens (NFTs). CityDAO uses Discord to issue alerts known as "land drops" when there are opportunities to purchase said NFTs.
  • The attacker issued a fake land drop from the admin's compromised account, pocketing 29.67 ETH ($95,000) in the process.
  • The affected admin, "Lyons800", subsequently tweeted that the attack was "a ridiculous security breach from Discord."
  • This marks a second large hack via Discord in less than a month. On Dec. 21, Justin Kan's NFT platform Fractal suffered a breach in which someone hacked the project's account to issue a fraudulent link to users promoting a new NFT, making off with around $150,000.

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Jamie Crawley

Jamie Crawley is a CoinDesk news reporter based in London.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.



Read more about