The cryptocurrency industry has recently witnessed yet another unfortunate incident involving a hacking attack.
This time, the target was the official Twitter account of , a built on the Ethereum network.
The attack compromised the account of one of the and as a result, an estimated amount between $750,000 and $900,000 was lost.
The hacker managed to seize at least 87 NFTs belonging to 16 different users.
Among the affected addresses, one lost a significant number of NFTs.
This included a Bored Ape artwork that was previously sold for $125,000 in September 2021.
Determining the exact value of the stolen digital artwork is still under analysis due to the fluctuating nature of NFT prices.
At least one of the has since sold stolen assets for $640k, according to .
What happened?
The attacker used Twitter last Friday, July 7th, to promote a public airdrop of Gutter Cat Gang’s legitimate collection called GutterMelo.
The collection was released in late June, and the hacker published a link to the airdrop, which was fake.
Those who clicked on it had their wallets drained of their assets without receiving anything in return.
Immunefi’s Adrian Hetman commented on the matter, stating that, typically, the victim interacts with malicious contracts in cases like these.
They are required to give approval to the contract and allow it to spend the tokens on behalf of the user.
After that, the hacker who controls the contract gains the authority to transfer even the users’ NFTs as they wish.
About two days after the hack, Gutter Cat Gang Twitter explained the situation, expressing remorse regarding the incident.
The account’s owner said that they are collaborating with the authorities to try and identify the attacker while simultaneously taking steps to prevent something like this from happening again.
However, to the fans’ disappointment, there is currently no mention of trying to compensate the victims for their losses.
Gutter Cat Gang’s team claims that the account was properly protected
Many have also expressed concern about the Gutter Cat Gang’s account security. The account owner claims to and other security measures, although it remains unclear what those included.
Twitter offers three options: authentication via the app, SMS, or a dedicated key. According to cybersecurity expert James Bore, app-based authentication is generally considered the most secure option.
He like Microsoft Authenticator, Google Authenticator, or Authy tend to be the most effective as the code is never transmitted over networks.