CityDAO

CityDAO's Discord was compromised via social engineering, allowing the attacker to hijack an administrator account. The attacker created a fake land-drop announcement pointing users to a phishing site, where victims connected their wallets and unknowingly approved fraudulent transactions.

67 ETH by exploiting Discord webhooks to ensure the phishing announcement immediately appeared to all logging-in users.