Polygon Discord Compromise Airdrop Phishing - Revision history

Azoundria at 19:29, 18 September 2024

2024-09-18T19:29:25Z

← Older revision		Revision as of 13:29, 18 September 2024
Line 2:		Line 2:
	{{Unattributed Sources}}		{{Unattributed Sources}}

	[[File:Polygon.jpg\|thumb\|Polygon Homepage/Logo]]Polygon is a popular protocol and a framework for building and connecting Ethereum-compatible blockchain networks. Just prior to the Polygon network's official upgrade from MATIC To Poly, their Discord account started promoting an airdrop of additional Poly tokens. Polygon security officer Mudit Gupta posted on Twitter some time later to inform the community, and this was subsequently retweeted by the official Polygon account. However, this was far too late for many users who lost funds, including at least one user losing $150,000 USD. The Polygon team promised a post-mortem to be released. Neither a post-mortem nor plans to assist victims could be located.<ref name="slowmisthackedarchive-15429" /><ref name="muditguptatwitter-15456" /><ref name="superdutypttwitter-15457" /><ref name="codemontwitter-15458" /><ref name="fishman18066236twitter-15459" /><ref name="crypto0megatwitter-15460" /><ref name="dogexbirdapptwitter-15461" /><ref name="muditguptatwitter-15462" /><ref name="samkoynatwitter-15463" /><ref name="etherscan-15464" /><ref name="muditguptatwitter-15465" /><ref name="validatorktwitter-15466" /><ref name="0xpolygontwitter-15467" /><ref name="cryptomioxtwitter-15468" /><ref name="filipdobruttwitter-15469" /><ref name="cryptomioxtwitter-15470" /><ref name="sexyynfttwitter-15471" /><ref name="crypto0megatwitter-15472" /><ref name="shadabk2005twitter-15473" /><ref name="parrotcoinstwitter-15474" /><ref name="thecryptobtwitter-15475" /><ref name="thecryptobtwitter-15476" /><ref name="etherauthoritytwitter-15477" /><ref name="cryptochiefnewstwitter-15478" /><ref name="zonecryptotwitter-15479" /><ref name="zonecryptotwitter-15480" /><ref name="roundtablespacetwitter-15481" /><ref name="roundtablespacetwitter-15482" /><ref name="voodoonemesitwitter-15483" /><ref name="roundtablespacetwitter-15484" /><ref name="akashbitcoinstwitter-15485" /><ref name="brutalbtctwitter-15486" /><ref name="yanntokentwitter-15487" /><ref name="cryptohuhterztwitter-15488" /><ref name="web3marketsitetwitter-15489" /><ref name="tokenwarsiotwitter-15490" /><ref name="cryptotownhalltwitter-15491" /><ref name="reggiecointwitter-15492" /><ref name="bowtiedpickletwitter-15493" /><ref name="zonecryptofeedtwitter-15494" /><ref name="lypptwitter-15495" /><ref name="ibcgroupiotwitter-15496" /><ref name="boringsecdaotwitter-15497" /><ref name="0xpolygontwitter-15498" />		[[File:Polygon.jpg\|thumb\|Polygon Homepage/Logo]]Polygon is a popular protocol and a framework for building and connecting Ethereum-compatible blockchain networks. Just prior to the Polygon network's official upgrade from MATIC To Poly, their Discord account started promoting an airdrop of additional Poly tokens. Polygon security officer Mudit Gupta posted on Twitter some time later to inform the community, and this was subsequently retweeted by the official Polygon account. However, this was far too late for many users who lost funds, including at least one user losing $150,000 USD. The Polygon team promised a post-mortem to be released. Neither a post-mortem nor plans to assist victims could be located.<ref name="slowmisthackedarchive-15429" /><ref name="muditguptatwitter-15456" /><ref name="superdutypttwitter-15457" /><ref name="codemontwitter-15458" /><ref name="fishman18066236twitter-15459" /><ref name="crypto0megatwitter-15460" /><ref name="dogexbirdapptwitter-15461" /><ref name="muditguptatwitter-15462" /><ref name="samkoynatwitter-15463" /><ref name="etherscan-15464" /><ref name="muditguptatwitter-15465" /><ref name="validatorktwitter-15466" /><ref name="0xpolygontwitter-15467" /><ref name="cryptomioxtwitter-15468" /><ref name="filipdobruttwitter-15469" /><ref name="cryptomioxtwitter-15470" /><ref name="sexyynfttwitter-15471" /><ref name="crypto0megatwitter-15472" /><ref name="shadabk2005twitter-15473" /><ref name="parrotcoinstwitter-15474" /><ref name="thecryptobtwitter-15475" /><ref name="thecryptobtwitter-15476" /><ref name="etherauthoritytwitter-15477" /><ref name="cryptochiefnewstwitter-15478" /><ref name="zonecryptotwitter-15479" /><ref name="zonecryptotwitter-15480" /><ref name="roundtablespacetwitter-15481" /><ref name="roundtablespacetwitter-15482" /><ref name="voodoonemesitwitter-15483" /><ref name="roundtablespacetwitter-15484" /><ref name="akashbitcoinstwitter-15485" /><ref name="brutalbtctwitter-15486" /><ref name="yanntokentwitter-15487" /><ref name="cryptohuhterztwitter-15488" /><ref name="web3marketsitetwitter-15489" /><ref name="tokenwarsiotwitter-15490" /><ref name="cryptotownhalltwitter-15491" /><ref name="reggiecointwitter-15492" /><ref name="bowtiedpickletwitter-15493" /><ref name="zonecryptofeedtwitter-15494" /><ref name="lypptwitter-15495" /><ref name="ibcgroupiotwitter-15496" /><ref name="boringsecdaotwitter-15497" /><ref name="0xpolygontwitter-15498" /><ref name="unnamed-15499" /><ref name="unnamed-15500" />

	== About Polygon ==		== About Polygon ==
Line 191:		Line 191:
	<ref name="boringsecdaotwitter-15497">[https://twitter.com/BoringSecDAO/status/1827237997810741557 @BoringSecDAO Twitter] (Accessed Sep 18, 2024)</ref>		<ref name="boringsecdaotwitter-15497">[https://twitter.com/BoringSecDAO/status/1827237997810741557 @BoringSecDAO Twitter] (Accessed Sep 18, 2024)</ref>

	<ref name="0xpolygontwitter-15498">[https://twitter.com/0xPolygon/status/1829161112144900518 @0xPolygon Twitter] (Accessed Sep 18, 2024)</ref></references>		<ref name="0xpolygontwitter-15498">[https://twitter.com/0xPolygon/status/1829161112144900518 @0xPolygon Twitter] (Accessed Sep 18, 2024)</ref>

			<ref name="unnamed-15499">[https://www.panewslab.com/zh/sqarticledetails/w5ls25fz.html Polygon：Discord已恢复保护和访问权限，但外部机器人和集成暂时禁用 - PANews] (Accessed Sep 18, 2024)</ref>

			<ref name="unnamed-15500">[https://x.com/0xRoundTable/status/1827259860657832419 x.com] (Accessed Sep 18, 2024)</ref></references>

Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/polygondiscordcompromiseairdropphishing.php}} {{Unattributed Sources}} Polygon Homepage/LogoPolygon is a popular protocol and a framework for building and connecting Ethereum-compatible blockchain networks. Just prior to the Polygon network's official upgrade from MATIC To Poly, their Discord account started promoting an airdrop of additional Poly tokens. Poly..."

2024-09-18T17:38:00Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/polygondiscordcompromiseairdropphishing.php}} {{Unattributed Sources}} thumb|Polygon Homepage/LogoPolygon is a popular protocol and a framework for building and connecting Ethereum-compatible blockchain networks. Just prior to the Polygon network's official upgrade from MATIC To Poly, their Discord account started promoting an airdrop of additional Poly tokens. Poly..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/polygondiscordcompromiseairdropphishing.php}}
{{Unattributed Sources}}

[[File:Polygon.jpg|thumb|Polygon Homepage/Logo]]Polygon is a popular protocol and a framework for building and connecting Ethereum-compatible blockchain networks. Just prior to the Polygon network's official upgrade from MATIC To Poly, their Discord account started promoting an airdrop of additional Poly tokens. Polygon security officer Mudit Gupta posted on Twitter some time later to inform the community, and this was subsequently retweeted by the official Polygon account. However, this was far too late for many users who lost funds, including at least one user losing $150,000 USD. The Polygon team promised a post-mortem to be released. Neither a post-mortem nor plans to assist victims could be located.<ref name="slowmisthackedarchive-15429" /><ref name="muditguptatwitter-15456" /><ref name="superdutypttwitter-15457" /><ref name="codemontwitter-15458" /><ref name="fishman18066236twitter-15459" /><ref name="crypto0megatwitter-15460" /><ref name="dogexbirdapptwitter-15461" /><ref name="muditguptatwitter-15462" /><ref name="samkoynatwitter-15463" /><ref name="etherscan-15464" /><ref name="muditguptatwitter-15465" /><ref name="validatorktwitter-15466" /><ref name="0xpolygontwitter-15467" /><ref name="cryptomioxtwitter-15468" /><ref name="filipdobruttwitter-15469" /><ref name="cryptomioxtwitter-15470" /><ref name="sexyynfttwitter-15471" /><ref name="crypto0megatwitter-15472" /><ref name="shadabk2005twitter-15473" /><ref name="parrotcoinstwitter-15474" /><ref name="thecryptobtwitter-15475" /><ref name="thecryptobtwitter-15476" /><ref name="etherauthoritytwitter-15477" /><ref name="cryptochiefnewstwitter-15478" /><ref name="zonecryptotwitter-15479" /><ref name="zonecryptotwitter-15480" /><ref name="roundtablespacetwitter-15481" /><ref name="roundtablespacetwitter-15482" /><ref name="voodoonemesitwitter-15483" /><ref name="roundtablespacetwitter-15484" /><ref name="akashbitcoinstwitter-15485" /><ref name="brutalbtctwitter-15486" /><ref name="yanntokentwitter-15487" /><ref name="cryptohuhterztwitter-15488" /><ref name="web3marketsitetwitter-15489" /><ref name="tokenwarsiotwitter-15490" /><ref name="cryptotownhalltwitter-15491" /><ref name="reggiecointwitter-15492" /><ref name="bowtiedpickletwitter-15493" /><ref name="zonecryptofeedtwitter-15494" /><ref name="lypptwitter-15495" /><ref name="ibcgroupiotwitter-15496" /><ref name="boringsecdaotwitter-15497" /><ref name="0xpolygontwitter-15498" />

== About Polygon ==
"Polygon is a protocol and a framework for building and connecting Ethereum-compatible blockchain networks. Aggregating scalable solutions on Ethereum supporting a multi-chain Ethereum ecosystem." "Polygon is an open source project built by decentralized team of contributors from all over the world."

"We envision an open, borderless world. A world in which people and machines collaborate and exchange value globally and freely, without gatekeepers or intermediaries. A world in which communities thrive, unconstrained by artificial borders and archaic regulations." "We don’t believe in traditional companies, hierarchy and management. Anyone is welcome to contribute code, ideas or anything else that can help make our vision a reality!"

"Polygon combines the best of Ethereum and sovereign blockchains into a full-fledged multi-chain system. Polygon solves pain points associated with Blockchains, like high gas fees and slow speeds, without sacrificing on security. This multi-chain system is akin to other ones such as Polkadot, Cosmos, Avalanche etc, but with at least three major upsides: (1) It is able to fully benefit from Ethereum’s network effects. (2) It is inherently more secure. (3) It is more open and powerful."

"Polygon combines the best of Ethereum and sovereign blockchains into an attractive feature set." "Ethereum is the blockchain development platform of choice, but it has limitations. Low Throughput. Poor UX (gas, delayed PoW finality). No sovereignty (shared throughput/clogging risk, tech stack not customizable, governance dependence)." "Many projects are exploring Ethereum-compatible blockchains as a way to mitigate these limitations while still leveraging Ethereum’s thriving ecosystem."

"Web3, Aggregated." "Enabling an infinitely scalable web of sovereign blockchains that feels like a single chain. Powered by ZK tech." "30% Claimed. 4,000,000 $POL Left @everyone"

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"Ahead of its scheduled mainnet upgrade from MATIC to POL tokens, Polygon suffered a Discord breach that led to $145,000 in losses for one user."
{| class="wikitable"
|+Key Event Timeline - Polygon Discord Compromise Airdrop Phishing
!Date
!Event
!Description
|-
|August 24th, 2024 12:41:00 AM MDT
|Shabad.eth Tweet
|Twitter user Shabad.eth asks if the Discord has been compromised and notes that there are spam links being posted in the channel presently.
|-
|August 24th, 2024 12:44:00 AM MDT
|Mudit Gupta Tweet
|Mudit Gupta posts a tweet to notify the community of the breached Discord server. At this time, the Polygon team is reportedly working to regain control.
|-
|August 24th, 2024 12:54:00 AM MDT
|Screenshot Of Scam Posts
|A screenshot is posted of the scam post, which is a pre-launch airdrop for the Matic to Polygon transition.
|-
|August 24th, 2024 1:43:00 AM MDT
|Massive Fund Loss
|One user reports losing $150,000 USD from one of their Ethereum pools in one go. They ask what responsibility Polygon will play, since they didn't mention the scam link on their main Twitter account.
|-
|August 24th, 2024 1:50:23 AM MDT
|User Lost Funds
|A blockchain transaction transfering 0.25 ETH happens in which Twitter user jadhav.eth (@samkoyna) reports that they lost ETH.
|-
|August 24th, 2024 3:43:00 AM MDT
|Discord Access Regained
|Mudit Gupta reports that they have regained access to the server and are currently cleaning up any changes which may have been made by the hacker to make sure they can't regain access.
|-
|August 24th, 2024 8:14:00 AM MDT
|Server Reported Secured
|The official Polygon Twitter account reports that the server is secured again. Mudit Gupta retweets and confirms that the server is now secured. They believe they've cleaned everything up, and a postmortem will be coming shortly.
|}

== Technical Details ==
"The phishing attack leveraged the network’s token transition to deceive users, prompting Polygon to disable bots and increase security as it approaches the September 4 launch."

== Total Amount Lost ==
The total amount lost has been estimated at $154,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
"@0xPolygon hey is your discord hacked? There are scam links being posted in the announcements channel and I got a timeout for highlighting this in the support channel."

"Mudit Gupta, the Chief Information Security Officer of Polygon, stated on the X platform that the Polygon Community Discord has been compromised. He advised users not to click on any links within the server as the team is working to regain control."

"PSA: Do not click on any links in the @0xPolygon community discord until further notice.

It has been compromised and we're trying to get back ownership."

== Ultimate Outcome ==
"Update: We've regained access and currently cleaning up all the changes made by the hacker to make sure they can't come back."

"The server is secured again. We'll share a post mortem once we're done with reviewing everything."

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisthackedarchive-15429">[https://web.archive.org/web/20240826170401/https://hacked.slowmist.io/ SlowMist Hacked - SlowMist Zone] (Accessed Sep 16, 2024)</ref>

<ref name="muditguptatwitter-15456">[https://twitter.com/Mudit__Gupta/status/1827235421979603352 @Mudit__Gupta Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="superdutypttwitter-15457">[https://twitter.com/SuperDutyPT/status/1827238441299443962 @SuperDutyPT Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="codemontwitter-15458">[https://twitter.com/codemon_/status/1827258241429991831 @codemon_ Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="fishman18066236twitter-15459">[https://twitter.com/fishman18066236/status/1827259071398822082 @fishman18066236 Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="crypto0megatwitter-15460">[https://twitter.com/Crypto_0mega/status/1827251501779046808 @Crypto_0mega Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="dogexbirdapptwitter-15461">[https://twitter.com/dogeXbirdapp/status/1827528555653177432 @dogeXbirdapp Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="muditguptatwitter-15462">[https://twitter.com/Mudit__Gupta/status/1827280495228678361 @Mudit__Gupta Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="samkoynatwitter-15463">[https://twitter.com/samkoyna/status/1827343926174351412 @samkoyna Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="etherscan-15464">[https://etherscan.io/tx/0xda32568559d9e74d9e15f038cb0c9cfce4a18267c15f576f79ddb0e4dc627048 Ethereum Transaction Hash (Txhash) Details | Etherscan] (Accessed Sep 18, 2024)</ref>

<ref name="muditguptatwitter-15465">[https://twitter.com/Mudit__Gupta/status/1827247544759664840 @Mudit__Gupta Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="validatorktwitter-15466">[https://twitter.com/ValidatorK/status/1827250459444441457 @ValidatorK Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="0xpolygontwitter-15467">[https://twitter.com/0xPolygon/status/1827348754153795666 @0xPolygon Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="cryptomioxtwitter-15468">[https://twitter.com/CryptoMiox/status/1827385778613407898 @CryptoMiox Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="filipdobruttwitter-15469">[https://twitter.com/FilipDobrut/status/1827923830477570106 @FilipDobrut Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="cryptomioxtwitter-15470">[https://twitter.com/CryptoMiox/status/1827366224998924619 @CryptoMiox Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="sexyynfttwitter-15471">[https://twitter.com/Sexyy_NFT/status/1827286252057661770 @Sexyy_NFT Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="crypto0megatwitter-15472">[https://twitter.com/Crypto_0mega/status/1827312525248999781 @Crypto_0mega Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="shadabk2005twitter-15473">[https://twitter.com/shadabk2005/status/1827234729898164363 @shadabk2005 Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="parrotcoinstwitter-15474">[https://twitter.com/parrot_coins/status/1827381668480463070 @parrot_coins Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="thecryptobtwitter-15475">[https://twitter.com/TheCrypto_B/status/1827276119445246024 @TheCrypto_B Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="thecryptobtwitter-15476">[https://twitter.com/TheCrypto_B/status/1827375811059462278 @TheCrypto_B Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="etherauthoritytwitter-15477">[https://twitter.com/Ether_Authority/status/1827379481645916656 @Ether_Authority Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="cryptochiefnewstwitter-15478">[https://twitter.com/CryptoChiefNews/status/1827321268623856101 @CryptoChiefNews Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="zonecryptotwitter-15479">[https://twitter.com/_ZoneCrypto_/status/1827597540533137718 @_ZoneCrypto_ Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="zonecryptotwitter-15480">[https://twitter.com/_ZoneCrypto_/status/1827354939628339272 @_ZoneCrypto_ Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="roundtablespacetwitter-15481">[https://twitter.com/RoundtableSpace/status/1827430977934913567 @RoundtableSpace Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="roundtablespacetwitter-15482">[https://twitter.com/RoundtableSpace/status/1827571673383448719 @RoundtableSpace Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="voodoonemesitwitter-15483">[https://twitter.com/VooDooNemesi/status/1827233137077973058 @VooDooNemesi Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="roundtablespacetwitter-15484">[https://twitter.com/RoundtableSpace/status/1827297498542858714 @RoundtableSpace Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="akashbitcoinstwitter-15485">[https://twitter.com/akashbitcoins/status/1827281252941996429 @akashbitcoins Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="brutalbtctwitter-15486">[https://twitter.com/_Brutal_BTC_/status/1827347223644139954 @_Brutal_BTC_ Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="yanntokentwitter-15487">[https://twitter.com/YannToken/status/1827578467808113003 @YannToken Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="cryptohuhterztwitter-15488">[https://twitter.com/Cryptohuhterz/status/1827622060819914818 @Cryptohuhterz Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="web3marketsitetwitter-15489">[https://twitter.com/Web3Market_site/status/1827713803905052841 @Web3Market_site Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="tokenwarsiotwitter-15490">[https://twitter.com/tokenwars_io/status/1827652184571363515 @tokenwars_io Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="cryptotownhalltwitter-15491">[https://twitter.com/Crypto_TownHall/status/1827431288367960208 @Crypto_TownHall Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="reggiecointwitter-15492">[https://twitter.com/Reggie_Coin/status/1827703727354249568 @Reggie_Coin Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="bowtiedpickletwitter-15493">[https://twitter.com/BowTiedPickle/status/1827766747346137265 @BowTiedPickle Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="zonecryptofeedtwitter-15494">[https://twitter.com/ZoneCrypto_feed/status/1827408443398934893 @ZoneCrypto_feed Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="lypptwitter-15495">[https://twitter.com/lypp/status/1827358703487434792 @lypp Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="ibcgroupiotwitter-15496">[https://twitter.com/ibcgroupio/status/1827431399579906505 @ibcgroupio Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="boringsecdaotwitter-15497">[https://twitter.com/BoringSecDAO/status/1827237997810741557 @BoringSecDAO Twitter] (Accessed Sep 18, 2024)</ref>

<ref name="0xpolygontwitter-15498">[https://twitter.com/0xPolygon/status/1829161112144900518 @0xPolygon Twitter] (Accessed Sep 18, 2024)</ref></references>