The more the non-fungible token (NFT) sector develops, the more the attempts at scams become. Today, a new type of hack involving the auction functionality of the OpenSea platform is threatening NFT holders.
NFTs threatened with hacks
If there is one activity that never ceases to renew itself, it is hacking. New types of attacks are continually emerging in Web3 and hackers redouble their inventiveness to trap users and steal their funds.
A new scam has just emerged and appears to threaten non-fungible token (NFT) holders and users of the OpenSea platform. It was Harpie, a company offering firewalls against hacks, which revealed the details of this hacking technique.
Hackers have been able to steal NFTs like magic with a little-known OpenSea feature. It’s the newest hack, and multiple millions in Apes have been lost to it already.
(🧵1/4) pic.twitter.com/fTK20WQrgh
— Harpie (@harpieio) December 22, 2022
👉 All about non-fungible tokens (NFT)
In summary, this scam uses a little-known feature of OpenSea, which allows platform users to set up auctions without gas charges. To do this, they simply need to sign an approval transaction, the message of which then appears unreadable (see the image attached to the tweet).
Thus, the scammer simply creates a phishing website to lure his prey and asks him to connect his wallet. Except that in reality, the signature that the user validates does not allow him to identify himself but to approve the auction of the NFTs of his portfolio for 0 Ether (ETH).
If the trapped individuals accept this transaction, they therefore risk losing all of their NFTs, which will be immediately sent to the hacker’s wallet. At the time of writing these lines, 14 Bored Ape (BAYC) were stolen in this way.
👉 To secure your cryptos and NFTs, here is the Ledger Nano X
The best way to secure your cryptocurrencies 🔒
🔥 The world leader in crypto security
Newsletter 🍞
Receive a summary of crypto news every Monday by email 👌
What you need to know about affiliate links. This page presents assets, products or services relating to investments. Some links in this article are affiliated. This means that if you buy a product or register on a site from this article, our partner pays us a commission. This allows us to continue to offer you original and useful content. There is no impact on you and you can even get a bonus by using our links.
Investments in cryptocurrencies are risky. Cryptoast is not responsible for the quality of the products or services presented on this page and could not be held responsible, directly or indirectly, for any damage or loss caused following the use of a good or service highlighted in this article. Investments related to crypto-assets are risky by nature, readers should do their own research before taking any action and only invest within the limits of their financial capabilities. This article does not constitute investment advice.
AMF recommendations. There is no guaranteed high return, a product with high return potential involves high risk. This risk-taking must be in line with your project, your investment horizon and your ability to lose part of this savings. Do not invest if you are not ready to lose all or part of your capital.
To go further, read our Financial Situation, Media Transparency and Legal Notices pages.
Journalist for Cryptoast, I strive to dissect every detail of the exciting world of cryptocurrencies and make it accessible and understandable to as many people as possible.
Lilian Aliaga
308 items
