Azoundria: Another 30 minutes complete. All sources merged in. Prevention added. Information relocated around.

2023-09-21T22:53:11Z

Another 30 minutes complete. All sources merged in. Prevention added. Information relocated around.

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/illuviumdiscordserverhack.php}} {{Unattributed Sources}} Illuvium NFT ProjectOn December 31, 2021, Illuvium's Discord server experienced a breach. Hackers gained access to a core contributor's account and inserted a rogue Discord webhook in the #jobs channel. They impersonated an Illuvium bot, promoting a New Year NFT event with a fake website resembling Illuvium's NFT..."

2023-09-15T19:27:58Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/illuviumdiscordserverhack.php}} {{Unattributed Sources}} thumb|Illuvium NFT ProjectOn December 31, 2021, Illuvium's Discord server experienced a breach. Hackers gained access to a core contributor's account and inserted a rogue Discord webhook in the #jobs channel. They impersonated an Illuvium bot, promoting a New Year NFT event with a fake website resembling Illuvium's NFT..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/illuviumdiscordserverhack.php}}
{{Unattributed Sources}}

[[File:Illuvium.jpg|thumb|Illuvium NFT Project]]On December 31, 2021, Illuvium's Discord server experienced a breach. Hackers gained access to a core contributor's account and inserted a rogue Discord webhook in the #jobs channel. They impersonated an Illuvium bot, promoting a New Year NFT event with a fake website resembling Illuvium's NFT platform. When users authorized the platform to access their wallets, the attacker stole digital assets, resulting in losses of $150,000 from 41 wallets. Illuvium took immediate action by banning compromised accounts, issuing warnings, and revoking unauthorized access. To compensate victims, Illuvium initiated a refund process, allowing affected users to claim their reimbursement by filling out a compensation form.

This is a global/international case not involving a specific country.<ref name="cryptogames3d-11789" /><ref name="illuvium-11790" /><ref name="youtube-11791" /><ref name="illuviumiotwitter-11792" /><ref name="illuviumiotwitter-11793" />

== About Illuvium ==
"Join the fight for ETH Welcome to the world of Illuvium"

"A decentralised studio building the world’s first Interoperable Blockchain Game (IBG) universe including an open-world exploration game, industrial city builder, and autobattler, all on the Ethereum blockchain.

Join a graphically-rich sci-fi adventure, explore 7 dazzling alien landscapes and conquer the wilderness to uncover the cataclysmic events that shattered Illuvium and help your crash-landed crew flourish!"

"Discover, hunt and capture over 150+ Illuvials, deadly beasts who rule this alien world—each possessing powerful abilities and synergies. Train your Illuvials to increase their power and fuse them together to create ascended forms, as you build the perfect Illuvial team."

"Illuvium is a decentralised autonomous organisation (DAO) with a global reach, boasting over 150 dedicated contributors and thousands of empowered token holders. Driven by collaboration, our goal is to provide an unparalleled experience to players, and we’re dedicated to making it happen."

"On the 31st of December 2021, the Illuvium discord server was compromised. Hackers were able to gain access to the account of a core Illuvium contributor. Once they did, they connected a rogue Discord webhook in the #jobs channel. In that channel, were impersonating an Illuvium bot and announcing a New Year NFT stealth mind."

"In that announcement, they attached a fake website similar to the Illuvium NFT platform. Once a user authorizes the platform to gain access to their wallets, the attacker will steal their digital assets. They were able to steal $150k from 41 wallets. However, Iluuvium believes that not all these wallets are those of the hackers. It believes that some of these wallets are those of the hackers. The game is also advising Illuvians who interacted with smart contract to revoke the site immediately."

"Illuvium Community, we are seeing a rise in scams in our Discord lately. As a reminder, please DO NOT click any links in the server or in DMs that promise a reward or prize. They are always scams.

More details will be shared soon. But for now, please do not click on any links."

"Once Illuvium became aware of this happening, Illuvium banned the compromised accounts. It also sent out warnings to members of its discord server. Their response team revoked the access of these accounts from accessing Illuvium’s internal systems."

"Despite Illuvium’s swift response, the hackers were able to steal $150k from 41 wallets. Following the recovery of their server, they could not recover the stolen funds. In this regard, the game will be refunding the assets stolen during the Illuvium discord server hack."

"As mentioned previously, we will be reimbursing those who lost their funds in the Discord scam that occurred 31st December 2021 PT. All affected users need to complete this form to claim their compensation"

"As part of its “post discord hack prodecures”, Illuvians will receive the USDT equivalent of the stolen funds. This will be done directly to the accounts of the victims. To recover your funds, fill the Illuvium Discord Security Incident Compensation Application Form."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - Illuvium Discord Server Hack
!Date
!Event
!Description
|-
|October 30th, 2021 8:45:13 AM MDT
|Illuvium Gameplay Trailer
|Illuvium publishes a gampelay trailer for their NFTs.
|-
|December 31st, 2021 3:57:00 AM MST
|Illuvium Warning Tweet
|Illuvium shares a warning on their Twitter channel.
|-
|December 31st, 2021 4:10:00 AM MST
|Illuvium Update
|Illuvium updates the tweet with confirmation of the attack and additional details about the unfolding situation.
|-
|January 31st, 2022 12:04:00 AM MST
|Compensation Form Online
|The Illuvium team publishes a compensation form for affected users in a Google Doc.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost has been estimated at $151,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
The total amount recovered is unknown.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="cryptogames3d-11789">[https://cryptogames3d.com/illuvium-to-reimburse-funds-stolen-during-illuvium-discord-server-hack/ Illuvium to Reimburse Funds Stolen During Illuvium Discord Server Hack - Crypto Games 3D - Blockchain Games List, News and Reviews] (Jul 15, 2022)</ref>

<ref name="illuvium-11790">[https://illuvium.io/ Illuvium] (Nov 18, 2022)</ref>

<ref name="youtube-11791">[https://www.youtube.com/watch?v=mzT88eN4gts Illuvium: Gameplay Reveal Trailer | Collectible RPG & Autobattler Game - YouTube] (Sep 15, 2023)</ref>

<ref name="illuviumiotwitter-11792">[https://twitter.com/illuviumio/status/1476893868859826188 @illuviumio Twitter] (Sep 15, 2023)</ref>

<ref name="illuviumiotwitter-11793">[https://twitter.com/illuviumio/status/1476870003760660482 @illuviumio Twitter] (Sep 15, 2023)</ref></references>

Illuvium Discord Server Hack - Revision history

Azoundria: Another 30 minutes complete. All sources merged in. Prevention added. Information relocated around.