This type of stuff probably happen with when you start making your own bot, pushing it to GitHub (or GitLab) and you forget that your config.json
is also in the repository, with the token...
It's pretty easy to find out who has their token on a repository just by encoding the bot's user ID in base64. If you push your token to GitHub, even Discord has a system that e-mails you saying that they found your token in GitHub and instantly resets it. Sometimes this may or may not happen, but if there is a token out there that closely emulates a token in a config.json
then your bot will be deleted.