Twitch co-founder Justin Kan is launching an NFT trading marketplace called Fractal, and it's off to a rocky start.
Early adopters of Fractal have been scammed out of about $150,000 worth of Solana, and it's all because of a Discord vulnerability. Over 100,000 members have joined Fractal's Discord in anticipation for the first NFT mint airdrop. Hackers gained control of Fractal's admin account and put out a fake post telling everyone the NFT drop was happening, and they could mint if they linked their wallets.
The fake out only lasted about 10 minutes, but that was long enough. 373 people clicked the link (only 0.3% of the total userbase) which looked authentic but was actually FractaI, with an "I", and not Fractal with an "L". Users linked their accounts and clicked the mint button, losing a total of 800 SOL which amounts to $149,576 USD.
Read Also: Twitch founder: Everyone I know in gaming is thinking about NFTs
Justin Kan have officially acknowledged the hack, and his team pledges to make this right to everyone who lost SOL and will reimburse those affected.
Here's what Kan said in the announcement post:
- Fractal is planning to fully compensate these 373 victims. We will need a few days to work it out. Please be patient with us. To the victims: We already have the list of Solana wallets that sent funds to the hacker and so we do not need anything from you at this moment. Do not delete your wallet, as we have no way to verify who the wallet owners are outside of returning funds to the wallets that were drained.
- Any information related to our airdrop will be communicated through our Twitter and accompanied by a video from Justin. #ProofOfJustin
- We are in touch with Discord Trust and Safety team to do a full security audit of our Discord.
- It seems like there may be other Discord communities hacked around the same time as we and we are working with them to compare notes and track down the hacker. There are traces everywhere ser. NGMI.