KOR Protocol Official X Account Phishing
Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.
Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!
KOR Protocol is a decentralized protocol to assist with managing intellectual property rights. The Twitter/X account of the protocol was hacked around October 11th, and remained compromised for more than a week. During this time, the community was repeatedly offered a fake airdrop on a wallet draining website. The account was ultimately recovered. It's unclear if any compensation will be provided to affected users.[1][2][3][4][5][6][7][8][9]
About KOR Protocol
"The KOR Protocol is a decentralized IP protocol that empowers creators, protects rights, and enables seamless collaboration and monetization of IP assets across music, film, TV, interactive media, and art."
"Ever since going from offline to online, the way we create, distribute and consume creative content has evolved beyond what we could have imagined just a few years ago. The Internet has empowered countless creators, from musicians to filmmakers, to unleash their artistry with unprecedented ease. Yet, despite this empowerment, the traditional intellectual property (IP) systems, rooted in a pre-Internet era, have failed to keep up. The Internet has outpaced the evolution of IP laws, structures, and systems meant to protect it. This has left many creators struggling to adequately protect their work, fully capture its value, and receive fair compensation.
The mission of the KOR Protocol is to establish a robust IP infrastructure tailored for managing the complete lifecycle of intellectual property within the entertainment and creative industries. Our IP management stack empowers creators, protects their rights, and facilitates seamless collaboration and monetization of IP assets across the Internet. Together with creators, developers, and industry partners around the globe, we aim to build the largest onchain IP ecosystem that allows the world’s creativity to reach its fullest potential."
"Effortlessly join 600,000 users on the KOR Protocol and shape the future of intellectual property."
"Join over 285K users effortlessly minting their NFTs through the KOR Protocol platform By completing quests and missions, users are stacking up points to earn rewards. Hundreds of developers are joining to expand the network with millions of active users ready to come onchain seamlessly."
"The new entertainment universe is powered by $IP. The $IP token fuels KOR Protocol - a decentralized IP ecosystem that revolutionizes how we access and engage with music, film, TV, gaming, and art."
"KOR Score is a reward system for engaging in the KOR Protocol community. Earn points through referrals, participating in quests, creating assets, purchasing collectibles, and developing products with KOR Tools."
"Earn KOR Score by taking part in creation quests, developing products using KOR Tools and by creating & remixing IP-based assets. Earn more KOR Score by inviting friends, share content to your social media platforms and by making referrals. KOR Protocol has an ecosystem of tools and applications to help transform your intellectual property."
"Built by legal, licensing and blockchain experts, MINTangible offers a comprehensive suite of IP protection, licensing and management solutions for Web3 projects, platforms and protocols."
The Reality
This sections is included if a case involved deception or information that was unknown at the time. Examples include:
- When the service was actually started (if different than the "official story").
- Who actually ran a service and their own personal history.
- How the service was structured behind the scenes. (For example, there was no "trading bot".)
- Details of what audits reported and how vulnerabilities were missed during auditing.
What Happened
"The official X account of the decentralized intellectual property (IP) platform KOR Protocol appears to have been compromised. The hacker has posted a fake phishing link."
| Date | Event | Description |
|---|---|---|
| October 11th, 2024 10:58:00 PM MDT | Scam Sniffer Tweet | Scam Sniffer posts a tweet warning about the compromised KOR Protocol account and sharing a screenshot. |
| October 22nd, 2024 8:59:00 AM MDT | X Account Access Recovered | The KOR Protocol team reports that the X account has been recovered now. |
Technical Details
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?
Total Amount Lost
The total amount lost is unknown.
How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
Immediate Reactions
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?
Ultimate Outcome
"The X page is back under our control.
We appreciate your support and patience as we worked to resolve the hack. If ever unsure about the legitimacy of a post or link please check in Discord as all official news will be made there too.
There is a big week ahead with many announcements, experiences and drops coming!"
Total Amount Recovered
There do not appear to have been any funds recovered in this case.
What funds were recovered? What funds were reimbursed for those affected users?
Ongoing Developments
What parts of this case are still remaining to be concluded?
Individual Prevention Policies
No specific policies for individual prevention have yet been identified in this case.
For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.
Platform Prevention Policies
Policies for platforms to take to prevent this situation have not yet been selected in this case.
For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.
Regulatory Prevention Policies
No specific regulatory policies have yet been identified in this case.
For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.
References
- ↑ @realScamSniffer Twitter (Accessed Nov 7, 2024)
- ↑ @KorProtocol Twitter (Accessed Nov 7, 2024)
- ↑ @_kidrah_24 Twitter (Accessed Nov 7, 2024)
- ↑ @web3_antivirus Twitter (Accessed Nov 7, 2024)
- ↑ @weaponheadsNFT Twitter (Accessed Nov 7, 2024)
- ↑ @distractchen Twitter (Accessed Nov 7, 2024)
- ↑ @TheKingCartello Twitter (Accessed Nov 7, 2024)
- ↑ @Mochikutty Twitter (Accessed Nov 7, 2024)
- ↑ @0x_swag Twitter (Accessed Nov 7, 2024)