CityDAO's Discord was compromised via social engineering, allowing the attacker to hijack an administrator account. The attacker created a fake land-drop announcement pointing users to a phishing site, where victims connected their wallets and unknowingly approved fraudulent transactions. The attacker extracted 29.67 ETH by exploiting Discord webhooks to ensure the phishing announcement immediately appeared to all logging-in users.

CityDAO, an Ethereum-based community blockchain city project, has posted that the CityDAO Discord administrator account has been hacked. 29.67 ETH ($95,000) funds were stolen by hackers using stolen admin accounts to post fake land airdrop messages. The attacked administrator, "Lyons800," tweeted that the attack was a "ridiculous security breach from Discord."