Immutable Faces Backlash for Weak Phishing Alerts in Discord

The developers of the Ethereum gaming platform Immutable have faced criticism for their “embarrassing behavior” and alleged attempts to cover up a security incident by providing minimal warnings regarding Discord phishing links.

On Monday, crypto investigator ZachXBT highlighted on X (formerly Twitter) that the Immutable Discord server had been “hacked” for a short time over the weekend.

He asserted that Immutable issued “no announcements” through its official channels, cautioning them that it “seems like you are trying to hide the security incident…”

In response, Immutable stated that an internal employee utilized the Discord channel to alert users about the harmful links within two hours following the incident, as per their claim.

Thanks @zachxbt. An Immutable employee posted in our discord within 2 hours of the incident, with the issue contained, but clearly we can retro how we publicly share comms. For full transparency, here is our security team’s summary.

At 4:05 PM UTC on 21 Sep 2024, a community…

— Immutable (@Immutable) September 23, 2024

Immutable’s reply to ZachXBT’s remarks.

Read more: Discord channels of five crypto firms hacked in a week

In its communication to ZachXBT, it appears that the issue was only disclosed after it had been managed, possibly leaving users exposed for a brief period.

Immutable reported that the Discord account of a community support contractor was “hacked” on Saturday, which led to the sharing of phishing links. The only alert via X came from another crypto-gaming studio, Illuvium, that same Saturday.

Screenshots posted by ZachXBT show one user questioning Immutable’s hesitation to issue a Discord announcement despite the breach. Another user revealed that the hackers disseminated malicious links that appeared to originate from the Discord moderators. They reported that their crypto was stolen after clicking on the links, saying, “I got ganked good.”

Just last August, the Discord channels of at least five crypto firms were hacked within a week. Representatives from Witness Chain, Polygon, Avalanche, Zksync, and Orderly Network informed users of the ongoing hacks through at least one of their official channels.

Protos has contacted Immutable for comment and will provide updates if a response is received.

Got a tip? Send us an email or ProtonMail. For more informed news, follow us onX, Instagram, Bluesky, and Google News, or subscribe to our YouTube channel.