RAAC Discord appears to be compromised, do not interact!

The RAAC project has warned that its official Discord server appears to have been compromised, urging community members not to interact with it, likely due to a hijacked admin account or malicious links being posted via the server. This kind of compromise is typically used to push phishing links, fake mints, or wallet-draining contracts under the guise of official project announcements. In recent years, Discord has become a primary coordination hub for NFT, memecoin, and broader Web3 communities, which also makes it a frequent target for attackers seeking to steal tokens and NFTs through social engineering and malware. Attackers commonly compromise moderator or bot accounts to post "official" announcements with links to fake websites, often mimicking legitimate mints, airdrops, or treasury operations; once users sign a transaction, their wallets can be drained. Security teams and project leads therefore often respond by immediately flagging the server as unsafe, instructing users not to click any links, not to sign transactions originating from Discord, and to rely instead on verified project channels (such as the official website or primary social account) until control is restored. This incident matters because it underscores a persistent structural risk in Web3: communities and liquidity are concentrated in a few centralized communication platforms like Discord, where compromise of a single admin or integration can enable large-scale theft. For traders and community members, the episode reinforces best practices such as treating every "urgent" Discord announcement with skepticism, verifying links against the project’s canonical website or social profiles, and revoking approvals if there is any chance a malicious contract was signed during the compromise window. It also adds to broader industry pressure on projects to harden Discord security with measures like hardware keys for staff, strict role separation, and incident playbooks.

✨ AI-generated background, compiled from web sources — not editorial content.

More coverage

• Discord Reveals Data Breach Following Third-Party Compromise (infosecurity-magazine.com)
• Discord confirms vendor breach exposed user IDs in ransom plot (foxnews.com)
• Discord Zendesk Support System Data Breach (firecompass.com)
• Discord warns users after data stolen in third-party breach (malwarebytes.com)
• Customer Service Firm 5CA Denies Responsibility for Discord Data ... (securityweek.com)

Explore the topic

• RAAC
• Discord