‘Completely wrecked’: Phishing attack during Aurory Project NFT drop steals millions; others get 500x gains
Link copied to
A phishing attack during an NFT drop overnight has netted the hacker millions of dollars in crypto and NFTs that were illicitly transferred from their victims’ wallets.
The attack occurred during the Aurorian gaming drop on the Solana blockchain. The scammer apparently cloned the Aurory Project website at app.aurory.io and reposted it at aurory.app (which is now inactive).
They then promoted the bogus link at the time of the 1am AEST drop in the Aurory Project’s Discord chat server.
I’ve got absolutely rugged by @AuroryProject.. Mint is supposed to start at 11pm SGT, and admins did mention of a backup site prior to launch. But 20mins in there is still no news of anything, the scammer took this opportunity provide a site that looked exactly like the real one
— Jun Yong (@yonghappybird) August 31, 2021
When users clicked the link and gave the fake site permission to their Solana wallet, a malicious contract drained everything.
And I find myself clicking into this site, believing it was true, and my wallet is completely emptied. 84 SOL, 1.3k USDC, Star Atlas posters, Sol Meet all gone. This scammer was able to @everyone, site was https://t.co/XMB39ftuqV
— Jun Yong (@yonghappybird) August 31, 2021
‘The funds were transferred to the Solana wallet address AUrox7sHx1L8mxEPrNqkVjHa16CXQ73UbgZtZTNPNLjx, which at one point last night contained over 10,600 SOL tokens worth a total of over US$1.1 million.
The wallet was set up a day ago, and while most of the Solana tokens had been moved elsewhere by this morning, the wallet still contained 295 NFTs, including Bold Badgers, Degenerate Apes, real Aurorians and SolBears. Some had been sold on NFT marketplace Solanart earlier this morning.
“Really really sad,” wrote one user, who lost a SolRock. “I feel so stupid… was blinded by the excitement to mind… and i didn’t check the link properly. please learn from my mistake – i hope this never happens to anyone here.”
Another victim lost 1,000 SOL – about US$107,000 worth. “I’m completely wrecked,” they wrote in a message to Paxos vice president Mike Dudas, who shared it on Twitter. “I don’t know what I’m going to do, I’m broken.”
Even crypto professionals were fooled. Two analysts with respected crypto-research firm Messari, Chase Devens and someone who tweets under the name “King Maven,” were among the victims.
Participated in the @AuroryProject drop and wasn’t able to mint any NFTs. A friend copy pasted a message from the Discord into our slack channel, thought he had DD’d it. I was the first one in the group to click it and had $15k SOL and all my NFTs wiped 😰
— ͏c͏h͏a͏s͏e ͏d͏e͏v͏e͏n͏s (@chasedevens) August 31, 2021
Devens wrote that he had felt on top of the world after flipping a Degen Ape for a 70 SOL profit (roughly US$7,500). But hours later he lost it in the scam. “I’m a SOL bull but now have nothing to show for it… At the end of the day the responsibility falls on me,” he tweeted.
@AuroryProject just got my wallet drained from a scam … https://t.co/bVT7p4LsTM … my life is in shambles … it’s my own fault … i typed in https://t.co/bVT7p4LsTM thinking that was your app …. i am so sorry
— King Maven (@KingMaven_) August 31, 2021
Incredibly, the scam wasn’t the only problem with the launch. A bug in the contract meant that users on the correct website got a deep discount on their Aurorians, minting them for just 1 SOL (US$107), rather than the 5 SOL (US$535) that the team intended.
I guess it was Black Friday, 1 SOL instead of 5
Post-mortem about the contract in the way 😅
If someone want to update the meme I would appreciate
— Aurory (@AuroryProject) August 31, 2021
The 10,000 NFTs sold out in “under three seconds,” the Aurory Project tweeted.
Those who were able to get one were able to make out like bandits. Aurorians were selling this morning for a minimum of 62 SOL (US$6,634) on Solanart, with numerous sales for over 100 SOL.
That’s it. That’s the tweet.@AuroryProject
— PadaWantoshi 🐱 Only DM’s Wives (@KiraciHop) September 1, 2021
The NFTs will be used in a yet to be released game.
Picked up 2 very rare Aurorian’s for a large markup but just going to hold.
Based on interest of sale buying these for a markup is worth it.
Could easily become dominant SOL NFT. pic.twitter.com/11JWjxlZ3Y
— McKenna (@Crypto_McKenna) August 31, 2021