OpenSA fraudsters went to phishing and caught over 250 NFTS of 17 users
OpenSA fraudsters went to phishing and caught over 250 NFTS of 17 users
- "This attack does not originate in the [OpenSea]," said the CEO and co -founder of the company
- Last week OpenSea launched a customer service server to reduce the risk of fraudsters who pretend to be an employee of the company
NFT dealers analyzed the consequences of an Openea phishing attack on Monday, which led to hundreds of NFTS stolen on weekends.
The attack seems to be over, with 17 People who were originally assumed that they are affected, according to OpenSea.
"This attack does not originate in the [OpenSea]", wrote Devin Finzer, CEO and co -founder, in a series of tweets . The company works with the users to find out who is responsible, said Finzer.
Finzer released reports Dollar and said that the hacker did it in her wallet, confirmed by Etherscan recordings.
An OpenSA spokesman rejected another statement and referred blockwork to the company tweets .
OpenSea is the largest NFT marketplace (not fungible tokens) according to trading volume and has more than 80 million NFTs in two million collections. On Monday, the platform had an Ethereum-based volume of $ 70.78 million, which corresponds to a decrease of $ 169.26 million a month ago Data by dune analytics user Rchen8.
The hacker made it away during the attack with 254 NFTs, including a few Bored Ape Yacht Club NFTS, according to A Calculation table From the blockchain security company Peckshield. Most of the NFTS that were stolen during the phishing attack were 37 Azukis Data by dune analytics user jelilat.
The users authorized the "migration" as in the phishing email, and the authorization made it possible for the hacker, the NFTS, Peckshield, tweeted .
Therefore, all malicious orders were supported by valid signatures of users who fell on the phishing fraud, Nadav Hollander, Chief Technology Officer from OpenSea tweeted Sunday.
The attacker user reported that the attacker had their crypto wallets connected to a fraudulent website, where they signed approvals with Wyvern Exchange in order to give the attacker control over their NFTs.Wyvern Exchange is a decentralized crypto exchange on the Wyvern protocol that interacts with the Ethereum blockchain.
"The attacker seems to have exploited users by having them signed a fraudulent signature to approve a private sale [their] nft in 0 ETH in the wallet of the attacker", wrote The Opendao in a Rel = "Nofollow noopener" Target = "_ Blank" href = "https://theopendao.medium.com/opensea-phishing-attack-19-february-202- and-the-opendaos-Response-4f71AA80578C"> Post . "Unfortunately, nobody reads what they have signed."
phishing fraud is often via text messages or emails with misleading messages, ads or websites that look legitimate. While fraud occurs in all industries, some community members call it a mistake from Openea to use email in general.
The co-founder of Pixel Vault, which is known under the pseudonym Beanie, named e-mail "an archaic way of communication" that "self-experienced user exposes to the risk of being exploited by phishing fraud.
"The OpenSea email warning system never really worked anyway, since it was overrun with spam", beanie tweeted .
While messaging platforms such as Discord or Blockscan Chat enable users to register with Ethereum addresses to send wallet-to-wallet messages, there are only limited new opportunities for companies to communicate with their users.
Last week, OpenSea started a customer service server with the web3 communication platform Metalink to reduce the risk of fraudsters who pretend to be an employee of the company, reported block works.
"Our goal is to create a direct channel for you that you can use to interact with OpenSea to receive support, get feedback, get updates and to exchange other information that helps us to serve better," said Stevey Tromberg, Community Manager from OpenSea, a rel = "Nofollow noopener" Target = "_ Blank" href = "https://mirror.xyz/metajake.eth/balwh3uuzhvbdt0n_v9xmxatsiaogcb6gor6kiw-cua"> Awarding .
The partnership was founded after alleged fraudsters had previously been an employee of OpenSea to deceive other NFT owners in their discord chat, which caused them to lose millions of dollars.
"NFT communities earn a safe place where you can connect and develop," said Jake Udell, the founder of Metalink.
. .
The contribution OpenSea Scammer Went Phishing and Caught Over 250 NFTS from 17 Users is not a financial advice.