Discord's @DynoDiscord is able to take someone to token via verification method.
The main scam inferences:
People are able to easily edit the way that Dynos discord prompt works and able to put malicious links into something that looks legit.
Once clicking on this legitimately looking verification button that's from Dyno, discord will ask you if you would like to enter this other website. Websites that look weird or have replaced letters could mean that it's bringing you to a website that tries to trick you. The website will ask you to "drag and drop to your browsers bookmark bar" which is a line of JavaScript that executes whenever you go to the discord web app and click on the bookmark. This steals your discord account token.
Debunking (kinda):
the JavaScript code is obfuscated, which makes it hard to read on purpose. There is a line of code that shows where the discord token gets sent to. (I will personally not be taking a closer look at how this works. I'm only giving out simple information.)
Resources:
100% of the resources in this tweet was from a YouTube channel called No Text To Speech. https://www.youtube.com/watch?v=0emiy4TxV7A
