Mastodon seems to be recovering after a Distributed Denial of Service (DDoS) attack that took down its primary mastodon.social instance. As TechCrunch notes, the platform began reporting issues early Monday morning as much of the Mastodon-operated server became inaccessible.
It’s not clear who might be behind the attack, but Mastodon’s head of communications Andy Piper described it as a “major” incident. A couple hours later, Mastodon shared on a status page that it had implemented countermeasures and that users should be able to access mastodon.social once again. Piper said that “some ongoing instability is a possibility” as the site recovered. It’s unclear if any other instances of the service were also targeted; mastodon.social is run directly by the nonprofit and is the largest server on the federated platform.
Mastodon is the second decentralized platform to be targeted with a DDoS in recent days. Last week, Bluesky also dealt with a significant DDoS incident that took parts of the service offline for several hours. The company posted what it said was its final update Monday morning, saying that its service had “remained stable” and that there was “no evidence of unauthorized access to private user data.” A few hours later, however, it seemed Bluesky was once again experiencing some issues, though the cause was unclear. Its official status page was down, and a post from its server status account indicated that there were “elevated errors and timeouts on some Bluesky-hosted services.” Bluesky said it was investigating.
