Mastodon Hit by DDoS Attack on Flagship Server

Mastodon, the decentralized social networking platform, experienced a significant distributed denial-of-service (DDoS) attack on its flagship server on April 20, 2026, causing outages that disrupted access for users worldwide just days after a similar incident targeted rival platform Bluesky.

The attack began around 1 p.m. ET, overwhelming Mastodon's mastodon.social instance with malicious traffic that rendered the service unusable at times. Users encountered error messages and full-screen outage warnings, limiting their ability to post or interact on the microblogging site. According to updates on Mastodon's status page, the team identified the issue as a DDoS assault and began investigating immediately. By 4:05 p.m. ET, countermeasures were in place, restoring accessibility, though the platform noted potential ongoing instability as the attack persisted. A follow-up update the next day confirmed that the disruption had ended and operations returned to normal.

DDoS attacks flood servers with junk traffic to knock services offline, without stealing data but severely impacting availability. In Mastodon's federated structure, where thousands of independent servers interconnect,...