Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/orderlynetworkdiscordservercompromised.php}} {{Unattributed Sources}} Orderly Network Logo/HomepageOrderly Network provides liquidity from a combination of decentralized and centralized exchange services. On August 29th, the official Discord of the project started to announce a rewards program that hadn't previously been mentioned, using similar wording..."

2024-09-20T18:05:50Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/orderlynetworkdiscordservercompromised.php}} {{Unattributed Sources}} thumb|Orderly Network Logo/HomepageOrderly Network provides liquidity from a combination of decentralized and centralized exchange services. On August 29th, the official Discord of the project started to announce a rewards program that hadn't previously been mentioned, using similar wording..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/orderlynetworkdiscordservercompromised.php}}
{{Unattributed Sources}}

[[File:Orderlynetwork.jpg|thumb|Orderly Network Logo/Homepage]]Orderly Network provides liquidity from a combination of decentralized and centralized exchange services. On August 29th, the official Discord of the project started to announce a rewards program that hadn't previously been mentioned, using similar wording to some official site announcements. The team announced the issue on Twitter shortly thereafter, and by the afternoon had restored the Discord server to proper full functioning. It is unclear whether any users fell for the phishing attack and any funds were lost.<ref name="slowmisthackedarchive-15653" /><ref name="orderlynetwork-15662" /><ref name="orderlynetwork-15663" /><ref name="orderlynetworktwitter-15664" /><ref name="dmpiersontwitter-15665" /><ref name="mixumstudiotwitter-15666" /><ref name="najdorf250twitter-15667" /><ref name="sajibdebbdtwitter-15668" /><ref name="semidefitwitter-15669" /><ref name="orderlynetworktwitter-15670" /><ref name="codeglitchtwitter-15671" /><ref name="solidintelxtwitter-15672" /><ref name="quackduckcryptotwitter-15673" /><ref name="gabakimutwitter-15674" /><ref name="coinmoinewstwitter-15675" /><ref name="zugaaanzubababatwitter-15676" /><ref name="b0ynexd0rtwitter-15677" /><ref name="b0ynexd0rtwitter-15678" /><ref name="encryptwizardtwitter-15679" /><ref name="22is2manytwitter-15680" /><ref name="garybingxtwitter-15681" /><ref name="tolgaozektwitter-15682" /><ref name="tramcamaptwitter-15683" /><ref name="cryptomageyttwitter-15684" /><ref name="cryptobull360twitter-15685" /><ref name="icodropstwitter-15686" /><ref name="dukewangtwitter-15687" /><ref name="cryptototemtwitter-15688" /><ref name="wyckoffwebtwitter-15689" /><ref name="orderlysnetwork-15690" />

== About Orderly Network ==
"The permissionless liquidity layer for Web3 trading. Powerful SDK, seamless integration for builders. Unified liquidity, superior performance for traders."

"Institutional-Grade Infrastructure with Shared Liquidity for CeFi & DeFi. We empower Web3 teams with comprehensive dApp tools and liquidity needed to rapidly deploy sophisticated omnichain trading apps. Our infrastructure provides a unified trading order book connected to every leading blockchain."

"$ORDER Rewards And Claiming NOW LIVE! We are proud to announce that after the recent launch of our staking & claiming platform, we're celebrating with our round 2 $ORDER claims! If you missed out on our first allocation distribution, feel free to claim Wave 2. Thank you for being part of our journey - we hope you enjoy it as much as we do."

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - Orderly Network Discord Server Compromised
!Date
!Event
!Description
|-
|August 26th, 2024 3:50:00 AM MDT
|Orderly Network Cursed
|Twitter user B0YNEXD0R wishes a curse upon the Orderly Network. "you'll ask for bread and God will give you stone".
|-
|August 29th, 2024 9:05:00 AM MDT
|Untitled Event
|Twitter user Najdorf250 is the first to report on the breach with a tweet that "$Order Discord hacked from Orderly currently"
|-
|August 29th, 2024 9:13:00 AM MDT
|Screenshot Is Shared
|A screenshot of the phishing link is shared on Twitter by user SajibDeb_bd.
|-
|August 29th, 2024 9:21:00 AM MDT
|Official Tweet Announcement
|The Orderly Network posts a tweet to warn their community against clicking any links in the compromised Discord server.
|-
|August 29th, 2024 1:37:00 PM MDT
|Chief Vibes Are Good
|Drew Pierson, the "Chief Vibes Officer" of Orderly Network, posts an update that the issue is "Fixed" and the team will "share the official all-clear soon".
|-
|August 29th, 2024 2:44:00 PM MDT
|Official Tweet Restored Announcement
|The Orderly Network team posts an update on Twitter to notify the community that the incident has now been resolved.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
"According to an official tweet from Web3 liquidity provider Orderly Network, their Discord server has been compromised. The official team advises users not to click on any links until the situation is fully resolved to avoid potential losses."

"ALERT: our discord has been compromised.

Do not click any links until we say it is all clear"

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisthackedarchive-15653">[https://web.archive.org/web/20240829200106/https://hacked.slowmist.io/ SlowMist Hacked - SlowMist Zone] (Accessed Sep 20, 2024)</ref>

<ref name="orderlynetwork-15662">[https://orderly.network/ Orderly Network | The permissionless liquidity layer for Web3 trading] (Accessed Sep 20, 2024)</ref>

<ref name="orderlynetwork-15663">[https://orderly.network/team/ Orderly Network | About Us] (Accessed Sep 20, 2024)</ref>

<ref name="orderlynetworktwitter-15664">[https://twitter.com/OrderlyNetwork/status/1829177473902465446 @OrderlyNetwork Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="dmpiersontwitter-15665">[https://twitter.com/DMPierson/status/1829241996256653760 @DMPierson Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="mixumstudiotwitter-15666">[https://twitter.com/MixumStudio/status/1829180439803691013 @MixumStudio Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="najdorf250twitter-15667">[https://twitter.com/Najdorf250/status/1829173420095156393 @Najdorf250 Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="sajibdebbdtwitter-15668">[https://twitter.com/SajibDeb_bd/status/1829175522758394340 @SajibDeb_bd Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="semidefitwitter-15669">[https://twitter.com/Semi_DeFi/status/1829177302908912021 @Semi_DeFi Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="orderlynetworktwitter-15670">[https://twitter.com/OrderlyNetwork/status/1829258827373654316 @OrderlyNetwork Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="codeglitchtwitter-15671">[https://twitter.com/codeglitch/status/1829180474692096328 @codeglitch Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="solidintelxtwitter-15672">[https://twitter.com/solidintel_x/status/1829183222405836914 @solidintel_x Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="quackduckcryptotwitter-15673">[https://twitter.com/quackduckcrypto/status/1829176839266500896 @quackduckcrypto Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="gabakimutwitter-15674">[https://twitter.com/gabakimu/status/1829206958555181085 @gabakimu Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="coinmoinewstwitter-15675">[https://twitter.com/CoinmoiNews/status/1829277484891971904 @CoinmoiNews Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="zugaaanzubababatwitter-15676">[https://twitter.com/zugaaanzubababa/status/1829178141157535969 @zugaaanzubababa Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="b0ynexd0rtwitter-15677">[https://twitter.com/B0YNEXD0R/status/1829178061197324789 @B0YNEXD0R Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="b0ynexd0rtwitter-15678">[https://twitter.com/B0YNEXD0R/status/1828007195037896801 @B0YNEXD0R Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="encryptwizardtwitter-15679">[https://twitter.com/encrypt_wizard/status/1829178034538328289 @encrypt_wizard Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="22is2manytwitter-15680">[https://twitter.com/22is2many/status/1829270682888503417 @22is2many Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="garybingxtwitter-15681">[https://twitter.com/Gary_BingX/status/1829184916535591164 @Gary_BingX Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="tolgaozektwitter-15682">[https://twitter.com/tolgaozek/status/1829177677862842658 @tolgaozek Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="tramcamaptwitter-15683">[https://twitter.com/tramcamap/status/1829212325175538138 @tramcamap Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="cryptomageyttwitter-15684">[https://twitter.com/CryptoMage_YT/status/1829178275261817228 @CryptoMage_YT Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="cryptobull360twitter-15685">[https://twitter.com/CryptoBull_360/status/1829189617641500682 @CryptoBull_360 Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="icodropstwitter-15686">[https://twitter.com/ICODrops/status/1829202438509011176 @ICODrops Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="dukewangtwitter-15687">[https://twitter.com/Dukewang_/status/1829189839042019528 @Dukewang_ Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="cryptototemtwitter-15688">[https://twitter.com/CryptoTotem/status/1829202970451304676 @CryptoTotem Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="wyckoffwebtwitter-15689">[https://twitter.com/wyckoffweb/status/1829186882804298005 @wyckoffweb Twitter] (Accessed Sep 20, 2024)</ref>

<ref name="orderlysnetwork-15690">[https://orderlysnetwork.com/ https://orderlysnetwork.com/] (Accessed Sep 20, 2024)</ref></references>

Orderly Network Discord Server Compromised - Revision history