/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

A look at Discord's outsized role in crypto and Web3 communities, as the platform struggles with rampant spam, phishing attacks, scammers, and malware

Rampant spam, phishing attacks, scammers, and malware—Discord has a lot of challenges securing crypto projects.  —  Lorenzo Franceschi-Bicchierai

VICE Lorenzo Franceschi-Bicchierai

Context & Ripple Effects

Discord spent 2020-2021 trying to grow past its gaming base — a profile of the company at 100M+ monthly users framed it as a communication tool for everyone — and crypto and Web3 projects adopted it as their default community hub. That adoption turned Discord into critical infrastructure for an industry built on irreversible transactions.

The security bill is now visible: Sophos researchers flagged Discord's own CDN as a growing malware distribution channel, and in April 2022 attackers compromised the servers of NFT projects including BAYC to push fake-minting phishing scams. This report ties those threads together into a systemic problem rather than isolated incidents.

First-order effects

  • Crypto and NFT projects running on Discord face direct losses when server compromises and fake-minting scams drain member wallets, making community managers responsible for security they don't control.

Second-order effects

  • Web3 teams must weigh self-hosted or alternative platforms against Discord's network effects, and Discord's trust-and-safety operation — already stretched by extremist-content takedowns and later generative-AI moderation challenges per its head of trust and safety John Redgrave — absorbs another abuse category.

Third-order effects

  • If a platform whose infrastructure hosts high-value financial communities can't secure them, Web3's reliance on borrowed web2 tooling becomes a structural liability, pushing the industry toward either native alternatives or platform-level trust guarantees.

The trend: As crypto communities concentrate on general-purpose chat platforms, platform trust and safety becomes de facto financial security infrastructure for Web3.

Discussion

  • @carnage4life @carnage4life on x
    Crypto projects use an insecure video game chat messaging app despite rampant spam, phishing attacks, scammers, and malware. Using a technology that's poorly designed to solve the problem at hand is the defining trait of crypto. 🤦🏾‍♂ ️ https://www.vice.com/...
  • @lorenzofb Lorenzo Franceschi-Bicchierai on x
    NEW: Discord has become the most important financial messenger in the world, thanks to being ubiquitous in crypto. But it has a lot of issues: it's not built for secure comms, leaks info of private channels, and is plagued by scammers and hackers. https://www.vice.com/...
  • @samwcyo Sam Curry on x
    Really great topic from @lorenzofb with work from @joshfraser and @gf_256, the Discord bot ecosystem really isn't where it needs to be in terms of security. We've put a lot of time into this and found a number of critical issues with then most popular bots. https://twitter.com/..…
  • @gf_256 Cts on x
    Vice Motherboard interviewed me! I got to poop on Discord bots for being a security hazard, hooray😊 https://www.vice.com/...
  • @nicholasadeleon Nicholas De Leon on x
    “Virtually every crypto project's Discord server is filled with fake accounts sending private messages with phishing links to everyone in the server.” https://www.vice.com/...
  • @adam_k_levin Adam Levin on x
    “Crypto hacks can be executed devastatingly quickly (one wrong link is all it takes to irreversibly swipe someone's holdings), and so hijacking a Discord server is an efficient way to target a large number of people at once.” https://www.vice.com/...
  • @lorenzofb Lorenzo Franceschi-Bicchierai on x
    I totally get making fun of crypto and some of the characters who run the show, or are part of it. But let's remember that there are thousands of people who are putting their savings in these projects, none the wiser, and are getting fucked. https://www.vice.com/...
  • @glumbird @glumbird on x
    This is hysterical. It's a video game messaging service. https://twitter.com/...
  • @nkulw Noah Kulwin on x
    A lot of aggressively regulated financial infrastructure is functionally IRC (eg SWIFT), convergence of social media co's w mkt manipulation should have been easier to foresee https://twitter.com/...