Page 1 of 2
Sample Community Security and Bot Audit
| Severity | Findings |
|---|---|
| High | 3 |
| Medium | 1 |
| Low | 1 |
Page 1 of 2: Scam and bot risk
- 01High
Scam link left up in #general
- Seen in
- #general, member view
- What we found
- A message links to a fake token claim site. It was posted three days before our review and is still up. No mod replied or removed it.
- Why it matters
- Everyone who scrolls #general sees it. One click on a wallet drainer can empty a member’s wallet, and they will blame your project.
- How to fix it
- Ban the poster and delete their recent messages in the same step.
- Server Settings > Moderation > Safety Setup > AutoMod: turn on Block Suspected Spam Content and Block Mention Spam. Set both to block the message and send an alert to a mod-only channel.
- Under Block Custom Words, add common scam phrases such as “claim your airdrop” and “connect wallet”.
- Safety Setup > DM and Spam Protection: turn on “Warn members before they visit outbound links”.
- 02High
No check on new members
- Seen in
- Our own join
- What we found
- We joined and could post in #general within seconds. There was no CAPTCHA and no rules screen.
- Why it matters
- Raid bots and scam accounts post the moment they arrive. Nothing slows them down.
- How to fix it
- Safety Setup > DM and Spam Protection > Verification Level: raise it to High. Accounts without a verified phone number then wait 10 minutes in the server before they can post.
- Safety Setup > Raid Protection and CAPTCHA: turn on “CAPTCHA suspicious accounts before they are able to join” and “CAPTCHA all accounts before they can join during a suspected raid”.
- Turn on Activity Alerts and send them to your mod channel.
