Avalanche, ZkSync, and Polygon Discords Compromised in Weekend Exploits Targeting Users

• Avalanche’s Discord was compromised, with harmful links shared, prompting a swift response to restore the platform’s safety.
• ZkSync’s Discord faced a similar attack, with hackers promoting a fraudulent airdrop, just one hour after the Avalanche breach.
• Less than 48 hours before the Avalanche and ZkSync attacks, Polygon’s Discord was also exploited with malicious link schemes.

This past weekend, several blockchain platforms, including Avalanche and ZkSync, fell victim to coordinated Discord exploits. Users of these platforms were warned against interacting with links or accounts, as hackers took control of their official servers. This attack comes just days after Grayscale Investments launched its Grayscale Avalanche Trust.

Avalanche Discord Compromised, Team Restores Services

On August 25, Avalanche reported that its Discord server had been compromised, with hackers sharing harmful links to fraudulent token distribution schemes. The breach prompted the Avalanche team to advise users not to click on any links until the issue was fully resolved. 

Ben Well, Avalanche’s community lead, noted that the team quickly identified and addressed the exploit. To ensure the safety of the platform, they removed suspicious channels and roles while working to restore the server to its normal operations.

Well assured the community, stating, “We found the issue and have it resolved.” He also acknowledged that the team was diligently working to return everything to normal, thanking users for their patience.

ZkSync Hit Shortly After Avalanche Attack

Just one hour after Avalanche’s breach, ZkSync’s Discord was also compromised. Hackers once again shared malicious links, this time promoting a fraudulent “round 2 airdrop” that falsely promised free ZK tokens. While ZkSync has not issued an official statement on X, team members within the ZkSync Discord have noted the breach.

This attack on ZkSync highlights the increasing frequency of such incidents, with multiple platforms targeted over the same weekend. Notably, ZkSync and Avalanche’s incidents occurred less than 48 hours after a similar attack on Polygon.

Polygon Discord Targeted in Similar Manner

Polygon’s Discord faced a comparable attack prior to the Avalanche and ZkSync breaches. Hackers gained access and shared malicious links throughout the server, urging users to interact with fraudulent airdrop schemes. Polygon’s Chief Information Security Officer, Mudit Gupta, confirmed the attack and emphasized the importance of avoiding links until the platform resolved the issue.

The coordinated nature of these attacks has prompted swift responses from each project, ensuring users are aware of the risks and taking measures to safeguard their platforms.