Orderly Network Discord Server Compromised

From Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository
Jump to navigation Jump to search

Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

Orderly Network Logo/Homepage

Orderly Network provides liquidity from a combination of decentralized and centralized exchange services. On August 29th, the official Discord of the project started to announce a rewards program that hadn't previously been mentioned, using similar wording to some official site announcements. The team announced the issue on Twitter shortly thereafter, and by the afternoon had restored the Discord server to proper full functioning. It is unclear whether any users fell for the phishing attack and any funds were lost.[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26][27][28][29][30]

About Orderly Network

"The permissionless liquidity layer for Web3 trading. Powerful SDK, seamless integration for builders. Unified liquidity, superior performance for traders."

"Institutional-Grade Infrastructure with Shared Liquidity for CeFi & DeFi. We empower Web3 teams with comprehensive dApp tools and liquidity needed to rapidly deploy sophisticated omnichain trading apps. Our infrastructure provides a unified trading order book connected to every leading blockchain."

"$ORDER Rewards And Claiming NOW LIVE! We are proud to announce that after the recent launch of our staking & claiming platform, we're celebrating with our round 2 $ORDER claims! If you missed out on our first allocation distribution, feel free to claim Wave 2. Thank you for being part of our journey - we hope you enjoy it as much as we do."

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

  • When the service was actually started (if different than the "official story").
  • Who actually ran a service and their own personal history.
  • How the service was structured behind the scenes. (For example, there was no "trading bot".)
  • Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.

Key Event Timeline - Orderly Network Discord Server Compromised
Date Event Description
August 26th, 2024 3:50:00 AM MDT Orderly Network Cursed Twitter user B0YNEXD0R wishes a curse upon the Orderly Network. "you'll ask for bread and God will give you stone".
August 29th, 2024 9:05:00 AM MDT Untitled Event Twitter user Najdorf250 is the first to report on the breach with a tweet that "$Order Discord hacked from Orderly currently"
August 29th, 2024 9:13:00 AM MDT Screenshot Is Shared A screenshot of the phishing link is shared on Twitter by user SajibDeb_bd.
August 29th, 2024 9:21:00 AM MDT Official Tweet Announcement The Orderly Network posts a tweet to warn their community against clicking any links in the compromised Discord server.
August 29th, 2024 1:37:00 PM MDT Chief Vibes Are Good Drew Pierson, the "Chief Vibes Officer" of Orderly Network, posts an update that the issue is "Fixed" and the team will "share the official all-clear soon".
August 29th, 2024 2:44:00 PM MDT Official Tweet Restored Announcement The Orderly Network team posts an update on Twitter to notify the community that the incident has now been resolved.

Technical Details

This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

Total Amount Lost

The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

Immediate Reactions

"According to an official tweet from Web3 liquidity provider Orderly Network, their Discord server has been compromised. The official team advises users not to click on any links until the situation is fully resolved to avoid potential losses."

"ALERT: our discord has been compromised.

Do not click any links until we say it is all clear"

Ultimate Outcome

What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

Total Amount Recovered

There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

Ongoing Developments

What parts of this case are still remaining to be concluded?

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.

References

  1. SlowMist Hacked - SlowMist Zone (Accessed Sep 20, 2024)
  2. Orderly Network | The permissionless liquidity layer for Web3 trading (Accessed Sep 20, 2024)
  3. Orderly Network | About Us (Accessed Sep 20, 2024)
  4. @OrderlyNetwork Twitter (Accessed Sep 20, 2024)
  5. @DMPierson Twitter (Accessed Sep 20, 2024)
  6. @MixumStudio Twitter (Accessed Sep 20, 2024)
  7. @Najdorf250 Twitter (Accessed Sep 20, 2024)
  8. @SajibDeb_bd Twitter (Accessed Sep 20, 2024)
  9. @Semi_DeFi Twitter (Accessed Sep 20, 2024)
  10. @OrderlyNetwork Twitter (Accessed Sep 20, 2024)
  11. @codeglitch Twitter (Accessed Sep 20, 2024)
  12. @solidintel_x Twitter (Accessed Sep 20, 2024)
  13. @quackduckcrypto Twitter (Accessed Sep 20, 2024)
  14. @gabakimu Twitter (Accessed Sep 20, 2024)
  15. @CoinmoiNews Twitter (Accessed Sep 20, 2024)
  16. @zugaaanzubababa Twitter (Accessed Sep 20, 2024)
  17. @B0YNEXD0R Twitter (Accessed Sep 20, 2024)
  18. @B0YNEXD0R Twitter (Accessed Sep 20, 2024)
  19. @encrypt_wizard Twitter (Accessed Sep 20, 2024)
  20. @22is2many Twitter (Accessed Sep 20, 2024)
  21. @Gary_BingX Twitter (Accessed Sep 20, 2024)
  22. @tolgaozek Twitter (Accessed Sep 20, 2024)
  23. @tramcamap Twitter (Accessed Sep 20, 2024)
  24. @CryptoMage_YT Twitter (Accessed Sep 20, 2024)
  25. @CryptoBull_360 Twitter (Accessed Sep 20, 2024)
  26. @ICODrops Twitter (Accessed Sep 20, 2024)
  27. @Dukewang_ Twitter (Accessed Sep 20, 2024)
  28. @CryptoTotem Twitter (Accessed Sep 20, 2024)
  29. @wyckoffweb Twitter (Accessed Sep 20, 2024)
  30. https://orderlysnetwork.com/ (Accessed Sep 20, 2024)