A hacker can steal a Discord user's authentication token and login to their account without needing a password. The authentication token is saved on the user's computer once they have authenticated on the Discord platform.