> For the complete documentation index, see [llms.txt](https://dontfeedthewolf2019s-organizatio.gitbook.io/securing-discords-for-web3/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dontfeedthewolf2019s-organizatio.gitbook.io/securing-discords-for-web3/discord-compromised/help-ive-been-hacked.md).

# HELP! I'VE BEEN HACKED!?

Resources for those experiencing an attack.

## Remove Threat

Use the **Server Owner/Admin** account to remove the <mark style="color:red;">compromised user</mark> <mark style="color:red;">or bot</mark> from the Server.

{% content-ref url="/pages/bXYomlvna3SjxhxJpIuu" %}
[Owner & Admin Perms](/securing-discords-for-web3/fundamentals/owner-and-admin-perms.md)
{% endcontent-ref %}

<mark style="color:red;">**If an Admin was compromised**</mark><mark style="color:red;">...</mark> The Server is Compromised. Remove the threat & **lockdown the server** (automatic with WICK or similar bot) / manual process:

### LockDown Server

* [ ] Remove **Administrator roles/permissions** from all users & bots&#x20;
* [ ] Set all **Categories/Channel** to private&#x20;

  *(save for a single read-only channel, with single text-only alert post)*
* [ ] &#x20;Review **Roles/Permissions** on users & bots to ensure server is locked down
* [ ] Have compromised Admin change their password.&#x20;
* [ ] Have all staff setup new unmarked email addresses and change their Discord emails.&#x20;
* [ ] Change passwords once again, ensure password contains letters (combination of lower & uppercase), numbers, and at least one symbol (!@#$%^&\*)
* [ ] Consider reviewing this document before restoring channels and permissions. <br>

<mark style="color:red;">**If the Server Owner account is compromised...**</mark> the Server is lost. Attempt to change the password, but if ownership has been passed to a new account, then recovery is near impossible.&#x20;

{% content-ref url="/pages/2ojTa2QZSZBfkQkiOgGF" %}
[Role Hierarchy](/securing-discords-for-web3/fundamentals/role-hierarchy.md)
{% endcontent-ref %}

**Discords are COMPROMISED, not hacked.** Compromises can be avoided. Damage for all other unavoidable attack types can be mitigated. Study the fundamentals to prevent future attacks.

{% content-ref url="/pages/z46lwwVHLCpFtKKiYQOH" %}
[Security Audit Checklist](/securing-discords-for-web3/fundamentals/security-audit-checklist.md)
{% endcontent-ref %}