Hacker News new | ask | show | jobs
by shiohime 1637 days ago
This is the thing that stands out most to me here - how did the phisher possibly post in the announcements channel?? This exploit seems like it could have further reaching impacts assuming the announcements channel and server roles / permissions was configured properly. Otherwise this is no different from like almost any other phishing attack since the beginning of time... .
1 comments

The webhook URL to post to that channel got leaked outside of Discord, doesn't seem like a Discord exploit.
so simply that URL was worth about $1,000,000

I hope whoever sold it didn't undervalue their asset