Update on Casper’s Discord Security Breach and Current Status

Dear Community Members,

We are writing to update you on the recent security issues experienced on our Discord server.

Early this morning, January 31st, 2024, at approximately 6:44 AM UTC, a malicious entity gained access to Casper Association’s Discord server.  

The intruders subsequently shared links to a phishing site, intending to compromise users’ wallets via Wallet Connect.

We immediately informed the DNS administrators of the phishing site, including Cloudflare, Google, and Wallet Connect, and kept the community updated about the ongoing fraudulent activities.

At 6:55 AM UTC, the Casper Association promptly alerted our community through the official Casper Telegram Channel, followed by an announcement at 8:51 AM UTC on Twitter.

Please do not interact with the phishing site or connect your wallet to it.

By 10:15 AM UTC, the Casper Association had partially regained control of the Discord server. We began deleting channels and messages containing the phishing links and posted warnings to prevent further access to these links.

Later in the day, at 3:45 PM UTC, we fully secured the Discord server and implemented measures to remove fraudulent users, admins, and bots.

The server will be restored and brought back online in a controlled manner. The Casper Association is actively working for the fraudulent site to be shut down. In the meantime, do not interact with any other site than the official Casper Association and CasperLabs websites.  

We will report this incident to the relevant authorities and provide a comprehensive report once our investigation is complete.

Thank you for your patience and cooperation.