Calamity Discord Hack: How Fake Mods Took Over a 250,000 Member Server

Calamity Discord Hack: How Fake Mods Took Over a 250,000 Member Server

One convincing message was enough to hand over a 250,000 member server.

On October 9, two users posing as former moderators reportedly tricked the owner of the Calamity mod Discord. Within hours the server was pushing a crypto coin to its own members.

This article explains how the Calamity Discord hack happened, how a hijacked server ping looks, and what members and server owners can do to avoid the same trap.

🔥 Main Story: Fake Former Mods Hijack the Calamity Discord

Gaming outlets reported that the Calamity server, home to more than 250,000 Terraria mod fans, was taken over on October 9. Kotaku’s report says the owner was tricked into handing over access by two users masquerading as former moderators.

The attackers then spammed links to a cryptocurrency named after the server. The coin was pumped and dumped, leaving members who bought in with the losses.

The key fact: the hijack worked through trust, not a technical exploit. The owner reportedly gave access willingly to people who claimed to be former staff.

🎮 What Happened

The mod’s development stopped in August, according to Spawnpoint’s coverage. That made a server wide ping on October 9 feel like good news, since some members read it as a sign the mod might return.

About an hour later, moderators on the r/CalamityMod subreddit posted an emergency warning telling people to leave the Discord and avoid the crypto links. A former moderator then used overlooked admin permissions to wipe the server’s channels and messages.

🧭 Navigation: Main Story → What Happened → Why It Matters → Key Details → Spot a Hijacked Ping → Comparison → Owner Note → What Happens Next

🚨 Hijack flow: 🎭 Fake mods contact the owner → 🔑 Access is handed over → 📣 Server wide ping goes out → 💰 Crypto links spread → 🛑 Community warns members

🧠 Why It Matters

Large servers are valuable targets. A single ping can reach hundreds of thousands of people who trust the source.

The attack also used hope as bait. A server that has been quiet for months can make a surprise announcement feel exciting, which lowers people’s guard.

⚠️ Important: Reports name a hacker called Kata as one of the users involved, based on a user’s own reveal and Reddit posts. Treat that identification as reported, not proven.

⚡ Key Details

🔍 Deeper Breakdown

How the Takeover Worked

According to a subreddit post later confirmed by the previous owner, two users convinced the owner they were former moderators. After the scam surfaced, one revealed themselves as Kata, who Kotaku says has reportedly hacked dozens of popular servers over two years.

The details of how access was transferred have not been published. What is clear is that the owner acted on a claim, not a verified identity.

How the Damage Spread

During roughly an hour, the server filled with links to the coin. TalkEsport’s timeline says tens of thousands of members left the server over the following days.

Even after the wipe, Kotaku reports that one hacker remained in a single announcement channel and posted messages claiming that the wrong people had been given permissions. The server’s current state may have changed since then.

How to Spot a Hijacked Server Ping

This is general safety guidance, not an official checklist. Use it any time a surprise ping lands.

🔎 Check list: 📣 Unexpected ping from a quiet server → 🎣 Exciting bait, like a comeback or giveaway → 🔗 Link to a coin, wallet or “claim” page → ❓ No confirmation anywhere else → 🚫 Stop and verify

Look for four red flags. The first is timing, such as a big ping after months of silence.

The second is bait that plays on what the community wants. The third is any link that asks you to buy, claim or connect a wallet, and the fourth is the lack of any matching post on the project’s other official channels.

When in doubt, verify outside Discord. Check the project’s official website, social accounts or subreddit, which is exactly how the Calamity community caught the scam.

💡 Note: Our guide to fake giveaways and creator servers covers more scam patterns, including fake verification bots and dangerous QR codes.

What We Know

• Confirmed: the server was compromised on October 9, the owner was tricked by two users posing as former moderators, and a crypto coin was promoted.
• Reported: the hacker is Kata, a former moderator wiped the server, and tens of thousands of members left.
• Not confirmed: how much money members lost, and the exact permissions the fake moderators received.

What Could Happen Next

This section is speculation. The server could be recovered through Discord’s support channels, or the community could move to a new home.

It could also be abandoned entirely. Nothing about its future has been confirmed.

📊 Quick Comparison

💡 Owner Note

If you run a server, the lesson is simple. Never hand over permissions because someone says who they used to be.

• Verify any claim of past staff status through a method outside Discord.
• Give new helpers the lowest permissions they need, not admin.
• Keep ownership and admin rights limited to people you know well.
• Turn on two factor authentication on your own account.

🚨 What Happens Next

• Watch for official updates from the Calamity community on Reddit.
• Watch for similar attacks on other large servers.
• Review your own server’s admin list this week.
• Remind members to verify surprise pings before clicking.

Spot the red flag → Verify elsewhere → Report the scam → Protect your server

Final Takeaway

This hack did not need clever code. It needed a believable story and an owner who trusted it.

The community response also shows what works. Fast warnings on another platform, and a moderator who still had real admin power, limited the damage.

The best defense is a habit: when a surprise ping feels too good, check somewhere else first.

🔗 Sources

1. Kotaku: Hacker steals Discord for Terraria mod Calamity to pump crypto: The main report on the hijack, timeline and wipe.
2. r/CalamityMod emergency PSA: The community’s warning post.
3. Spawnpoint: Hacker hijacks Calamity Discord server: A summary of the takeover and the member exodus.
4. TalkEsport: Calamity Discord hacked: A timeline of the hack and what members should do.
5. Pirat_Nation on X: A social post summarizing the takeover.