A phishing attack on Axie Infinity’s Discord server did not bring any results

There was a phishing attack on Axie Infinity’s Discord server on early Wednesday through its MEE6 bot. Being one of the most popular discord management bots, MEE6 is a well known “face” in crypto Discord servers.

As soon as the compromised bot sent a message regarding a fake mint, which contained a phishing link in it, the Axie Infinity team deleted the message and removed MEE6 from their server. In a Twitter announcement regarding the attack, Axie Infinity claimed such incident is not unique to it and has happened to numerous servers with the MEE6 bot installed. However, through the official MEE6 support channel in Discord, the MEE6 team denied any allegations of having security issues, as they claimed their engineers didn’t find any unusual activity, furthermore the MEE6 team was not contacted by any community owners regarding any incident.

Nevertheless, many believe the attackers managed to compromise the bot’s admin account first, but then got access to an alternate admin account, through which the phishing messages were sent while the compromised admin account remained hidden.