XDiscordDonate
Solana Historical Society
XDiscordDonate
Record No. 2021-12-21-monkey-kingdom-discord-exploitCollectionVerified

Monkey Kingdom suspends its Baepes mint after a Discord phishing attack

On December 21, 2021, as Monkey Kingdom's Baepes presale began at 10:00pm HKT (14:00 UTC), a compromised Discord webhook posted a phishing link in its announcements channel. Monkey Kingdom posted that its Discord had been hacked, suspended the public sale and all future mints, and said the webhooks came from a compromise at Grape Protocol; Grape said one of its admins had been hacked a week earlier, affecting Monkey Kingdom and Fractal. Collectors that day reported nearly 7,000 SOL stolen, and Cointelegraph reported the losses as $1.3 million, citing Monkey Kingdom. By December 24 Monkey Kingdom said it had moved 1,532 SOL into a Compensation 2 wallet and finished the first 1,316 compensation requests.

Entities

  • Monkey Kingdom
  • Fractal
  • Grape Protocol

On-chain records (1)

On-chain records
TypeAddressNoteExplorer link
tx67RVi6…23GQzH 1,532 SOL moved to the Compensation 2 wallet 9sRiYUv1xS8it9oGRWyqMJL9d9F5wGrha8yvSztBf7FM, 2021-12-24 07:33:30 UTCView on Solscan (opens Solscan, a Solana explorer, in a new tab)
tx67RVi6Q5a7H5zmd9gXTxdxpGx1QhFvkzAA97fGjxmkL9sLtK92jdmWb7Gx6TSvjAeV3ZRsMNu1JWyT8fUa23GQzH1,532 SOL moved to the Compensation 2 wallet 9sRiYUv1xS8it9oGRWyqMJL9d9F5wGrha8yvSztBf7FM, 2021-12-24 07:33:30 UTC
View on Solscan (opens Solscan, a Solana explorer, in a new tab)

Sources & citations (15)

  1. https://web.archive.org/web/20211221143203/https://twitter.com/MonkeyKingdom_/status/1473300174739230722Captured Dec 21, 2021Deleted post, 21 Dec 2021 14:31 UTC: the site was down and some whitelisted holders could not mint. Original: https://twitter.com/MonkeyKingdom_/status/1473300174739230722
  2. https://web.archive.org/web/20211221152239/https://twitter.com/MonkeyKingdom_/status/1473312369556213769Captured Dec 21, 2021Deleted post, 21 Dec 2021 15:20 UTC: a phishing link was published on the Announcement channel; disconnect wallets. Original: https://twitter.com/MonkeyKingdom_/status/1473312369556213769
  3. https://web.archive.org/web/20211221161813/https://twitter.com/MonkeyKingdom_/status/1473326864899141632Captured Dec 21, 2021Deleted post, 16:17 UTC. Its image says a Discord webhook was compromised at 10:00pm HKT, when the presale began. Original: https://twitter.com/MonkeyKingdom_/status/1473326864899141632
  4. https://web.archive.org/web/20211221163833/https://twitter.com/MonkeyKingdom_/status/1473331988488941568Captured Dec 21, 2021Deleted post, 16:38 UTC. Its image apologizes for the hack and suspends all future mints. Original: https://twitter.com/MonkeyKingdom_/status/1473331988488941568
  5. https://web.archive.org/web/20211222062840/https://twitter.com/MonkeyKingdom_/status/1473539687688015877Captured Dec 22, 2021Deleted post, 22 Dec 06:23 UTC. Its image says Grape's compromise placed webhooks in the Monkey Kingdom server. Original: https://twitter.com/MonkeyKingdom_/status/1473539687688015877
  6. https://web.archive.org/web/20211224074641/https://twitter.com/MonkeyKingdom_/status/1474284901650550787Captured Dec 24, 2021Deleted post, 24 Dec 07:44 UTC, naming the Compensation 2 wallet 9sRiYUv1xS8it9oGRWyqMJL9d9F5wGrha8yvSztBf7FM. Original: https://twitter.com/MonkeyKingdom_/status/1474284901650550787
  7. https://web.archive.org/web/20211224133903/https://twitter.com/MonkeyKingdom_/status/1474372919585558531Captured Dec 24, 2021Deleted post, 24 Dec 13:34 UTC; more forms to follow after 31 Dec. Original: https://twitter.com/MonkeyKingdom_/status/1474372919585558531
  8. https://solscan.io/tx/67RVi6Q5a7H5zmd9gXTxdxpGx1QhFvkzAA97fGjxmkL9sLtK92jdmWb7Gx6TSvjAeV3ZRsMNu1JWyT8fUa23GQzHAccessed Oct 8, 20262021-12-24 07:33:30 UTC, from 2vzEHDWv8dibVyMbo8wW65xgeNjAXGRyWk6Yrihod3E6 to 9sRiYU…f7FM.
  9. https://x.com/SolanaLegend/status/1473310323050483717Accessed Oct 8, 2026Posted 2021-12-21 15:12 UTC.
  10. https://x.com/SOL_CryptoGamer/status/1473328847005401094Accessed Oct 8, 2026Says the mint was of Baepes. Posted 2021-12-21 16:25 UTC.
  11. https://x.com/grapeprotocol/status/1473422238250680320Accessed Oct 8, 2026Names Fractal and Monkey Kingdom; Discord webhooks. Posted 2021-12-21 22:36 UTC.
  12. https://x.com/fractalwagmi/status/1473903197479575559Accessed Oct 8, 2026Posted 2021-12-23 06:28 UTC.
  13. https://cointelegraph.com/news/hong-kong-nft-project-monkey-kingdom-loses-1-3m-in-phishing-hack-launches-compensation-fundAccessed Oct 8, 202622 Dec 2021. Reports the Grape breach and a compensation fund.
  14. https://www.theverge.com/2022/1/7/22870912/nft-communities-boom-discord-hackers-cryptocurrency-webhooksAccessed Oct 8, 20267 Jan 2022. Covers both the Monkey Kingdom and Fractal attacks.
  15. https://web.archive.org/web/20211127155933/https://howrare.is/dropsCaptured Nov 27, 2021Context only: Monkey Kingdom's first drop, 27 Nov, 09:00 UTC, 2,222 at 0.49 SOL; the 21 Dec Baepes sale was its second. Original: https://howrare.is/drops

Spot an error? Report a correction on our Discord (opens Discord in a new tab)

Join the community: @SolanaHeritage on X (opens in a new tab) · Discord (opens Discord in a new tab)