Ether Finance Discord Season 5 Rewards Phishing Links

From Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository
Jump to navigation Jump to search

Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

Ether Finance Logo/Homepage

Ether.fi is a decentralized finance (DeFi) platform that enables users to stake, earn, and spend crypto securely through products like restaking tokens, automated liquidity vaults, and a non-custodial crypto credit card offering 3% cashback. With over $6.88 billion in total value locked, it supports ETH, BTC, and stablecoins, emphasizing decentralization, security, and seamless integration across top DeFi protocols. However, a recent incident involving a compromised Discord server raised security concerns. Users were warned not to interact with suspicious links, but reports suggest some were removed from the server, and no formal post-mortem or user support response has been released yet.[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24][25]

About Ether Finance

Ether.fi is a decentralized finance (DeFi) platform focused on maximizing the utility of digital assets through staking, liquidity strategies, and crypto-enabled spending solutions. Its core mission is to empower users by giving them full control over their crypto while enabling them to save, grow, and spend within a robust, secure, and composable ecosystem. The platform currently boasts a total value locked (TVL) of over $6.88 billion, with several high-yield options such as 3.4% for staking, 9% from liquidity vaults, and 3% cashback through its crypto credit card.

Staking is the foundation of ether.fi’s offerings. Users can stake ETH, BTC, or stablecoins via value-accruing restaking tokens like weETH, eBTC, and eUSD. These allow holders to earn rewards while retaining liquidity and exposure to the underlying assets. Security is a top priority, with the platform being decentralized, audited, and battle-tested. The protocol is open source and supported by top-tier DeFi integrations including Aave, Pendle, and Gearbox.

The Liquid product automates yield strategies through smart vaults that auto-balance and compound returns across DeFi’s best-performing protocols. Users can choose vaults tailored to their asset types or risk profiles, maximizing returns with minimal management.

Ether.fi Cash introduces a non-custodial credit card with 3% cashback on all purchases. It integrates seamlessly with Apple Pay and Google Pay, offering global usage at over 100 million locations. This card is part of the platform’s goal to bridge DeFi with real-world utility.

The Reality

Unfortunately, it appears that there was an issue with the security of the Discord server.

What Happened

The Ether Finance Discord server was compromised and used to post scam websites which were supposedly related to getting the Season 5 rewards.

Key Event Timeline - Ether Finance Discord Season 5 Rewards Phishing Links
Date Event Description
June 6th, 2025 11:54:00 PM MDT First Mentions Of Hacked Account The first mentions on Twitter/X of the compromised Discord server. Y J, a developer, reports that they were kicked after saying that they were posting scam links.
June 7th, 2025 12:21:00 AM MDT First Twitter/X Notification Ether Finance posts on Twitter/X to warn their community not to interact with any links on Discord. They report to be investigating the situation and promise to release another update shortly.
June 7th, 2025 1:25:00 AM MDT Situation Considered Contained Ether Finance posts another update to Twitter/X in which they describe the situation as "contained". However, they still request that users tag them if they should see any suspicious activity on the channel.

Technical Details

It appears that the promotion was promising users their Season 5 rewards, which would be sent to their dashboard automatically already.

Total Amount Lost

It is unclear what users may have fallen victim to the posts on Discord.

The total amount lost is unknown.

Immediate Reactions

The Ether Finance team posted an initial warning for users to avoid interacting with any links which were posted on their Discord channel.

Ultimate Outcome

Some users reported being kicked and unable to join the Discord after asking if the server was compromised.

Total Amount Recovered

There is no mention of anything being done to assist anyone affected.

There do not appear to have been any funds recovered in this case.

Ongoing Developments

Ether Finance has not yet published a full post-mortem. It is unclear what the vulnerability was or what steps were taken to resolve it.

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.

References

  1. Ether Finance - "Please do not interact with any links in the http://ether.fi Discord. We’re investigating and will provide an official update shortly." - Twitter/X (Accessed Jun 16, 2025)
  2. Ether Finance - "The situation is contained. We are actively monitoring the channel and ask users to tag us should they see suspicious behavior. We will release more details as they’re confirmed." - Twitter/X (Accessed Jun 16, 2025)
  3. KThunder13 - "Pretty sure that the @ether_fi discord server has been hacked! Do not interact with any links!" - Twitter/X (Accessed Jun 16, 2025)
  4. UgHaseong - "$ETHFI @ether_fi discord got hacekd. Please do not interact witb any links in discord. Stay tune official announcement. STAY SAFE frens" - Twitter/X (Accessed Jun 16, 2025)
  5. [June 6th, 2025 11:54:00 PM MDT Y J - "Got banned on @ether_fi discord for saying their discord channel is posting scam links…. Nice…." - Twitter/X] (Accessed Jun 16, 2025)
  6. @CoinnessGL Twitter (Accessed Jun 16, 2025)
  7. @CoinnessGL Twitter (Accessed Jun 16, 2025)
  8. @bpaynews Twitter (Accessed Jun 16, 2025)
  9. Pablo - "@ether_fi it looks like your discord is compromised" - Twitter/X (Accessed Jun 16, 2025)
  10. Pablo - "@lynk0x @ether_fi discord is compromised I’m trying to bring awareness but nobody is paying attention please post they kicked me from the discord idk who’s owner but I’m trying to save people money" - Twitter/X (Accessed Jun 16, 2025)
  11. Yuelle5 - "your discord is hack" - Twitter/X (Accessed Jun 16, 2025)
  12. vBlueX2 - "posted it and they deleted it and kicked me out off discord" - Twitter/X (Accessed Jun 16, 2025)
  13. @SkeetSkeetNGo Twitter (Accessed Jun 16, 2025)
  14. @br1dge_eth Twitter (Accessed Jun 16, 2025)
  15. @highleyvarlet Twitter (Accessed Jun 16, 2025)
  16. @CoinRank_io Twitter (Accessed Jun 16, 2025)
  17. @SkeetSkeetNGo Twitter (Accessed Jun 16, 2025)
  18. @LosKruptos Twitter (Accessed Jun 16, 2025)
  19. @Yuelle5 Twitter (Accessed Jun 16, 2025)
  20. Mahalka Priyansh - "@ether_fi Discord is compromised , Be safe. Season 5 rewards will be sent to your dashboard within a week, don't click on any link to get access to airdrop" - Twitter/X (Accessed Jun 16, 2025)
  21. @DefiProwl Twitter (Accessed Jun 16, 2025)
  22. Etherfi (Accessed Oct 25, 2024)
  23. Etherfi (Accessed Oct 25, 2024)
  24. Getting Started (Accessed Oct 25, 2024)
  25. Introduction (Accessed Oct 25, 2024)