Security notice: the old Discord invite was an impostor server — do not connect any wallet

[warren618]

TL;DR: The Discord invite we previously listed in our README (discord.gg/2vDYc2w5) did not point to an official Vibe-Trading server. It led to an impostor server running a fake "Collab.Land" wallet-verification page (collab.layers-land.com) designed to drain crypto wallets. We have removed it and re-pointed our community link to the official, org-controlled HKUDS Discord: https://discord.gg/6TdQnT5xcF.

What happened (timeline)

• The invite was added to our README on 2026-04-01, when that server was a normal community server — it was not malicious when we linked it.
• The phishing infrastructure (collab.layers-land.com) rides a throwaway domain registered 2026-06-18; the server was repurposed/compromised long after we linked it.
• On 2026-06-18 we removed the invite from all five READMEs and our issue templates, and re-pointed to the official HKUDS server within minutes (commits 9f83b33, 9fffe48).

Vibe-Trading will never ask you to connect a wallet

Vibe-Trading is an open-source finance research tool. We will NEVER ask you to "verify", "connect", or "sign" with a crypto wallet to join the community, claim an airdrop, or unlock features. Any such prompt is a scam.

If you joined the old server or visited that page

• Do not connect or sign anything.
• If you already connected a wallet or approved/signed a transaction, move your funds to a fresh wallet and revoke approvals (e.g. via https://revoke.cash) from the affected wallet.
• Our only official Discord is https://discord.gg/6TdQnT5xcF (linked from the README).
• Security reports: see SECURITY.md.

We have reported the impostor server and domain. Thanks for helping keep the community safe. 🙏