SNEAK PEEK

• Tapio Finance suffered a security breach in their Discord server.
• CertiK Alert issued a warning to users not to click on any links.
• Tapio Finance removed the spam bot and reassured users that the server is no longer compromised.

Tapio Finance, a middleware platform for LSD Liquidity, recently suffered a security breach in its Discord server. According to reports, the server was compromised, and a spam bot was used to send phishing links to its users.

#CertiKSkynetAlert 🚨

We are seeing reports that the @TapioFinance Discord Server has been compromised.

Do not click on any links until the team has confirmed they’ve regained control of the server.#Hack #Discord https://t.co/L9vUEJCSfw

Stay vigilant! pic.twitter.com/49bf8bFsI6

— CertiK Alert (@CertiKAlert) April 29, 2023

The security firm CertiK Alert issued an alert on their Skynet platform, warning users not to click on any links until the Tapio Finance team confirms they have regained server control. The alert urged users to stay vigilant and avoid interacting with the link provided in the announcement.

On the other hand, the timing of the security breach on Tapio Finance’s Discord server is unfortunate, as it coincided with the launch of their highly anticipated $tapETH airdrop. Based on a screenshot from CertiK Alert, the airdrop was set to allow users to claim tokens before the exploit occurred. 

Additionally, Tapio stated on its Discord channel that it planned to release an airdrop for all community members in Ethereum chains. This would have allowed eligible users to claim tokens multiple times on different chains.

In response to the security breach, Tapio Finance swiftly addressed the issue by removing the spam bot from the Discord server. Consequently, this ensures that its users are no longer at risk of being targeted by phishing links. The company has since released a statement thanking CertiK for its alert and reassuring its users that the server is no longer compromised. 

As a precautionary measure, it is advisable for users who clicked on any suspicious links during the security breach to change their passwords. Moreover, they should activate and enable two-factor authentication to secure their accounts.