4 ms·
NFT holders panic as wallets are drained; some blame smart contract from OpenSea
- ssss11 5y agoIt was a phishing campaign. People clicked the wrong link and allowed a rogue smart contract to drain their wallets. Open sea has given an update on Twitter.
- ceejayoz 5y agoTheir CEO says otherwise: https://twitter.com/dfinzer/status/1495302787835432961 https://twitter.com/dfinzer/status/1495302787835432961 > Interaction with an OpenSea email is not a vector for attack. In fact, we are not aware of any of the affected users receiving or clicking links in suspicious emails.
- deleted 5y ago[deleted]
- detaro 5y agoPhishing doesn't necessarily mean "fake OpenSea email" specifically.
- richij 5y ago"The hacker is using a helper contract deployed 30 days ago, to call an OS contract deployed 4 years ago, with valid atomicMatch() data. "Likely a signature phishing attack from several weeks back, the attacker is exploiting now before … these listing phishings will expire in six days, so the hacker is acting now to steal items listed on the V1 marketplace. "This is not a generalized smart contract exploit, rather a latent phishing attack." https://twitter.com/0xfoobar/status/1495208279210876930 https://twitter.com/0xfoobar/status/1495208279210876930