While the global cryptocurrency market doesn’t seem to be rising above the bearish cycle, the crypto space is pulled down by a hack now.
Today Axie Infinity announced that the main server bot called MEE6 has been hacked. According to the team’s statement, the MEE6 bot was used by the hackers so that they could add the authorization to a fake Jiho account to simulate the mint announcement.
So basically MEE6 is a Discord bot that allows all the admins to automatically allow and restrict the roles and send messages. It’s just not one project but many projects installed under this bolt have faced similar issues.
Recently, in March, Ronin Network, created specifically for Axie Infinity, suffered a $625 million hack, making it one of the largest security breaches in the history of decentralized finance and cryptography.
MEE6 Bot Gets Compromised
According to Axie Infinity, though the fake mint message has been deleted, a few users could still see the message, hence should restart the Discord. The team has assured us that they will update us about the incident via Twitter, Discord, Substack, and Facebook.
However, the MEE6 bot is not hacked, but the servers’ administrators have been compromised, allowing attackers to use the MEE6 to post the messages.
How Did It All Happen?
According to the security experts at the Discord, most probably the hackers have first attacked the admin accounts so that they could create a reaction role feature in order to provide an alternate admin account and send the webbook messages as they hide the compromised admin account.
The security expert believes that removing MEE6 or webbooks immediately is the best solution instead of trying to identify the compromised account.
