"Lucky Hellicorn's website drained/hacked my wallet, and I lost xx eth"

"Lucky Hellicorn made the whole hacking thing by themselves, this is such a coincidence."

There are so many rumours and criticisms about our project after the mint day. Fewer and fewer people choose to trust us and stay with us for the long run after the unlucky experiences that happened on Dec 21st - our Mint day.

However, as a project that has been running for five months with an established product and a long-term vision, we think it's our responsibility to write the truth about what exactly happened on the mint day.

Website & Discord Attack Timeline on Dec 21st

12pm UTC

• Lucky Hellicorn's OG mint has been set live

• At the same time, Lucky Hellicorn's website has been through a DDoS Attack

DDoS (Distributed Denial of Service) is a category of malicious cyber-attacks that hackers or cybercriminals employ in order to make an online service, network resource or host machine unavailable to its intended users on the Internet.

12:40pm UTC

• Our tech team fixed the DDoS issue, and OGs are able to mint their NFTs without any issues.

1:30pm UTC

• The OG mint phase has ended, Whitelist mint phase has been set live

• Lucky Hellicron's Discord server suffered a malicious attack——bots repeatedly sent embedded messages in official channels with a fake link.

• We were deleting messages, removing unnecessary roles, kicking & banning bots, clearing permissions, closing channels… What an urgent and chaotic situation…

The Discord attack went on for around half an hour for us to regain control of the server.  Unsuspecting community members drained over 10 ETH worth of funds —-directed into the scammer’s wallet when they signed through the fake URL.

Both the website and Discord attacks brought negative waves to us, we took full responsibility for all that happened and brought up a compensation plan.

4pm UTC

• We made an announcement about the compensation plan and promised we'll pay back all the ETH losses to the users who got hacked/drained, and we'll also airdrop one Lucky Hellicorn NFT to affected users' wallets.

So, who hacked our Discord?

After reviewing and checking audit logs, we found that one of our recruited moderators added a BOT role to an account named "Turquoise" on Dec 15th. We blurred the Moderator's name as we are still unsure if this mod betrayed us or if his/her account had been hacked by the hacker. 

Dec 21st(on the mint day)

The Hacker named Turquoise prepared six bots to attack us via webhooks as the "Bot role" has Webhooks management permission.

Although we removed the BOT role 10 mins after the hack happened, it was still too late. We tried to contact the mod, but it seemed that this person knew nothing.

Lessons learnt

In conclusion, the whole thing was a well-planned hoax. Hackers used DDoS to fill up the bandwidth of our official website so that the website cannot be opened normally or the opening efficiency is very slow. Users couldn't load the website and were unable to mint. In the meantime, Hacker posted a phishing URL in our Discord and induced users to visit the fake website to mint.

After the incident happened, our co-founder Lannie immediately posted a tweet and said that we learnt a huge lesson.

Yes, we learned a valuable lesson, despite the fact that we announced the compensation plan immediately after the incident occurred, but we are still deeply sorry for what occurred and disappointed many Lucky Fam.

We hope that our experience will not happen to other projects, so we have summarized the following lessons and learned:

1. Public your mint page just 1-2 hours before the mint so that hackers won't have enough time to create a fake website.

2. Check all the DC settings within 1 hour before mint, and remove all suspicious users, settings and actions.

3. Don't give your mods/admins unnecessary permissions, manage roles, etc.

4. Review and manage bot permissions, disable or remove some bot roles on the mint day unless they are absolutely necessary.

5. Make sure your website is ready to prevent DDoS or other similar attacks.

We wish we could turn back the clock and prevent such calamitous events from occurring. However, time cannot be reversed; all we can do is look forward, be more cautious and professional in our management, and hope for a better and brighter future.

** **Let's keep building and believing that we are all Lucky As Hell!🍀🍀🍀

**

**

Trade-to-Mint is an innovative minting method designed by Lucky Hellicorn team to attract more users to join LuckyRaffle, which is a lucky-to-win NFT raffle product open to all Web3 users.

There are 7,000 Lucky Hellicorn NFTs allocated to the "Trade to Mint" phase starting at 1:30pm UTC on Dec 21.

When your trading volume on LuckyNFT crosses a certain amount of ETH, OR you have successfully invited a certain number of real users, you are eligible to free mint one Lucky Hellicorn NFT.

*Tip: An invited friend whose trading volume achieves at least 0.01E is viewed as a real user.

How to Trade-to-Mint?

There are seven tiers of Trade-to-Mint. The next tier will be automatically enabled once the total supply of the current tier has been minted out. Different tiers stand for distinct standards of trading volume and a specific number of invitations.

Here are the detailed standards of Trade-to-Mint:

For example, in Tier1, if your trading volume in LuckyRaffle reaches 0.05E or the number of your valid invitations achieves 5, you are able to free mint one Lucky Hellicorn NFT.

We are excited to celebrate your performance! If you have any questions, welcome to join our Discord via the link below.

🤞 Follow us on Social Media:

Website: https://luckynft.vip/

Twitter: https://twitter.com/LuckyHellicorn

Discord: Discord.gg/luckyhellicorn

Follow our #Announcement channel on Discord to never miss out on exciting events!

The key features of LuckyRaffle are Spend-to-Raffle and Lucky-to-Win.

The idea behind LuckyRaffle is to produce a continuous flow of lucky drops because we believe in co-creating luck.

We are excited to see who will become a lucky star and win a coveted BAYC via LuckyRaffle one day!

In this guide, we will literally show you how to participate in a LuckyRaffle.

1. Connecting your wallet

When you enter the Lucky Hellicorn website, you'll see a Connect Wallet button in the top right corner.

Connect your wallet and sign the message to approve the connection from your wallet to https://luckynft.vip.

Please double-check the URL to ensure that you are in the right domain.

2. Participating in a LuckyRaffle

When you enter the "Get Lucky" page, you'll see several different statuses in the section of Lucky Raffles.

Click the "Live" button to see all the ongoing raffles, and choose the one in which you want to participate.

3. Choosing the shares you want to deposit

Next, choose how many shares you would like to deposit. Different deposit shares stand for different rates of return and winning rates.

4. Ready to participate

After you have confirmed the shares to deposit and read and agree to the service agreement, you can deposit ETH to make the transaction.

The raffle winner will be randomly generated when the total shares reach the raffle goal.

Good Luck!

🤞 Follow us on Social Media:

Website: https://luckynft.vip/

Twitter: https://twitter.com/LuckyHellicorn

Discord: Discord.gg/luckyhellicorn

Follow our #Announcement channel on Discord to never miss out on exciting events!

With LuckyRaffle, everyone can launch an NFT raffle, and each participant may have the chance to win an amazing NFT, even with a small spend.

In this guide, we will tell you step by step how to launch a LuckyRaffle.

1. Connecting your wallet

When you enter the Lucky Hellicorn website, you'll see a Connect Wallet button in the top right corner.

Connect your wallet and sign the message to approve the connection from your wallet to https://luckynft.vip.

Please double-check the URL to ensure that you are in the right domain.

2. Launching a LuckyRaffle

Getting started to launch a Lucky Raffle with a Launch a Raffle button. Then, select the NFT collection for which you want to launch a Raffle.

3. Setting the details of the raffle

Price per share: The price of each share that the participant has to pay at least to join the raffle.

Estimated number of shares: Here is to show you the total amount of shares required to successfully launch the raffle after you complete the price per share.

The official will take a 10% transaction fee for each share transaction.

Ending Date: Currently, the official allows the raffle to run for one (1) day, seven (7) days, or 30 days.

Shares ready to pay: As the owner, you shall pay at least one share to run the raffle. When the total shares reach the selected NFT floor price, the winner will be drawn randomly from the raffle.

4. Ready to start the raffle

After you have completely set the details of the raffle, you can pay the ETH required to start the raffle.

🤞 Follow us on Social Media:

Website: https://luckynft.vip/

Twitter: https://twitter.com/LuckyHellicorn

Discord: Discord.gg/luckyhellicorn

Follow our #Announcement channel on Discord to never miss out on exciting events!

Each round of LuckyGiveaway is completely free for NFT holders.

NFT holders can join their eligible LuckyGiveaway, and holders of Lucky Hellicorn NFTs can freely join each LuckyGiveaway.

In this article, we will show you the process of participating in a LuckyGiveaway step by step.

1. Connecting your wallet

When you enter the Lucky Hellicorn website, you'll see a Connect Wallet button in the top right corner.

Connect your wallet and sign the message to approve the connection from your wallet to https://luckynft.vip.

Please double-check the URL to ensure that you are in the right domain.

2. Participating in a LuckyGiveaway

When you enter the "Get Lucky" page, you'll see three different statuses in the section of Lucky Giveaways.

Click the "Live" button to see all the ongoing giveaways and choose the one in which you are eligible to participate. If you are not eligible to join, the website will remind you.

3. Join Now

The website will show you how many shares you have left if you are an eligible participant.

The shares are the number of instances you can enter to participate in a given NFT giveaway.

Click "Join Now," and you will see a pop-up asking you to tweet a post on Twitter. The detailed content of the tweet post has already been prepared so that you can one-click to publish a tweet.

After you tweet and post the tweet URL, you can officially join the Lucky Giveaway.

Good Luck!

🤞 Follow us on Social Media:

Website: https://luckynft.vip/

Twitter: https://twitter.com/LuckyHellicorn

Discord: Discord.gg/luckyhellicorn

Follow our #Announcement channel on Discord to never miss out on exciting events!

What is Blue-chip Mint?

Blue-chip Mint is empowered by the ERC-721W protocol, which allows specific Blue-chip holders to mint Lucky Hellicorn NFT without connecting their Blue Chip NFT wallet and making signature authentication.

ERC-721W protocol is a creative way to greatly protect Bluechip holders' wallet security and reduce their concerns during mint.

In the Bluechip mint phase, Bluechip holders can just fill in their bluechip NFT number and mint the Lucky Hellicorn NFT with any Metamask wallet. After paying the gas fee, the Lucky Hellicorn NFT will be directly airdropped to that bluechip NFT number's wallet.

For example: BAYC#1311 does not need to sign verification on the BAYC#1311 holding address, just fill in the number 1311, and mint with any third-party wallet, the new NFT will be airdropped to the BAYC#1311's holding address.

Currently, holders of the following Bluechip projects are eligible to join Lucky Hellicorn's Bluechip Mint 🤞:

Bored Ape Yacht Club Mfers Mutant Ape Yacht Club Meebits Bored Ape Kennel Club Azuki
Kaiju Kings CryptoPunks Moonbirds Cool cats NFT Otherdeed for Otherside Degen Toonz doodles CLONE X -X TAKASHI MURAKAMI Angry Cat

What is ERC-721W protocol?

ERC-721W protocol is primarily a set of Blue-chip holder-friendly security minting protocol standards, which is optimized based on ERC-721.

With ERC-721W, Blue-chip holders can easily and safely mint the new NFTs without connecting their Blue-chip wallets and signing the verification, which can greatly protect their wallet security.

Step by Step Introduction of How does Blue-chip Mint Work

Please note: the following instruction is only for demonstration purposes,  the final mint page and user experiences could be slightly different. ** **

1. Go to Lucky Hellicorn’s mint page and connect your wallet

2. Click the "Bluechip” phase and the “Mint Now" Button

Note: Please check the cap of each Blue-chip NFT collection

3. Select a supported NFT collection that you own

Note: you don’t need to have that NFT collection in the wallet that connects with Lucky Hellicorn’s website.  

4. Submit the Blue-chip NFT token ID that you own

5. Before clicking "Mint Now" button, tick on the Messages

6. Pay the gas for minting Lucky Hellicorn NFT via Metamask

7. Wait for a few sec...

8. Success! Lucky Hellicorn NFT has been airdropped to the wallet with the submitted Blue-chip NFT token ID.

How does the ERC-721W protocol benefit Blue-chip holders?

In the decentralized world, wallet security is particularly important. The event of wallet loss NFT happens every day, and when blue chip holders need to authenticate their wallets to participate in minting, the possibility of blue chip loss is greatly increased.

To guarantee each holder's wallet safety, especially Blue-chip holders, Lucky Hellicorn uses ERC-721W protocol to technically ensure their wallet security. We hope all supported Blue-chip holders will have a safer and smoother minting experience.

Learn more on our website & social media:

Website: http://luckynft.vip Twitter: https://twitter.com/LuckyHellicorn Discord: discord.gg/luckyhellicorn