{"id":15477,"date":"2022-02-21T10:23:06","date_gmt":"2022-02-21T10:23:06","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/02\/21\/hacker-steals-over-1-7-million-worth-of-nfts-from-opensea-users\/"},"modified":"2022-02-21T10:23:06","modified_gmt":"2022-02-21T10:23:06","slug":"hacker-steals-over-1-7-million-worth-of-nfts-from-opensea-users","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/02\/21\/hacker-steals-over-1-7-million-worth-of-nfts-from-opensea-users\/","title":{"rendered":"Hacker steals over $1.7 million worth of NFTs from OpenSea users"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

What just happened?<\/strong> OpenSea, a service recently valued at over $13 billion, has seen at least 32 of its users affected by what was apparently a phishing attack, resulting in millions of dollars worth of NFTs being stolen. <\/p>\n

The Verge<\/a> reports that 254 tokens purchased from OpenSea were stolen from the wallets of users between 5 PM and 8 PM ET on Saturday. Some of the more expensive NFTs came from Decentraland, Bored Ape Yacht Club, and Mutant Ape Yacht Club\u2014here\u2019s a complete list<\/a> of pilfered digital assets.<\/p>\n

Devin Finzer, the co-founder and CEO of OpenSea, has reassured users that the site is fine. He added that \u201cas far as we can tell,\u201d the victims had fallen for a \u201cphishing attack.\u201d He linked to an explanation<\/a> on how the hack was enabled by exploiting the Wyvern Protocol used for most NFT smart contracts. Targets signed part of the contract, while attackers completed the rest, transferring ownership of the NFTs. Exactly how the hackers achieved this is unclear.<\/p>\n

\n

As far as we can tell, this is a phishing attack. We don\u2019t believe it\u2019s connected to the OpenSea website. It appears 32 users thus far have signed a malicious payload from an attacker, and some of their NFTs were stolen.<\/p>\n

\u2014 Devin Finzer (dfinzer.eth) (@dfinzer) February 20, 2022<\/a><\/p><\/blockquote>\n

But there are those who disagree with the phishing attack claim. Kotaku<\/a> notes that some victims say the only common link between them was that they all manually migrated their NFT collections to a new smart contract on the platform, which was performed because it \u201cfixes an issue with inactive listings that was allowing scammers to swipe valuable NFTs from collectors on OpenSea.\u201d<\/p>\n

\n

HEY EVERYONE. I CONNECTED WITH A FEW OTHER PEOPLE WHO GOT HACKED JUST NOW.<\/p>\n

ALL OF US ONLY HAVE ONE THING IN COMMON.
ALL OF OUR STOLEN NFT’S WERE ONES WE MANUALLY MIGRATED ON OPENSEA. @opensea<\/a> you have so much explaining to do now.<\/p>\n

\u2014 AlabasterJefferson (@AJFromDiscord) February 19, 2022<\/a><\/p><\/blockquote>\n

Again, though, others dispute this claim. \u201cI checked every transaction,\u201d said Neso, the user who explained how the Wyvern order was exploited. \u201cThey all have valid signatures from the people who lost NFTs so anyone claiming they didn\u2019t get phished but lost NFTs is sadly wrong.\u201d OpenSea has also denied that the new contracts were the origin of the hack.<\/p>\n

Exactly how much the stolen NFTs were worth is being disputed, too. Finzer said the attacker has $1.7 million in his wallet from selling some of the stolen tokens, but another report<\/a> claims the perpetrator made $2.9 million. It also appears that some of the NFTs along with some of the money they were sold for were returned to the owners.<\/p>\n

It\u2019s not been an easy time for OpenSea recently. It limited the number of NFTs people could create using its free minting tool to 50 last month, explaining that over 80% of the tokens created using this feature were counterfeit, used plagiarized content, or were spam. But the service reversed its decision and lifted the limit following an outcry from users.<\/p>\n<\/p><\/div>\n