Phishing Attack on the OpenSea | 2.20.22

GM Ser,

Phishing Attack on the OpenSea

In an estimated $1.7 million dollar loss, OpenSea users have fallen victim to a phishing scam. 

Someone on the platform stole hundreds of NFTs leaving their owners in a panic. The attacker got into 32 different accounts, snagging 254 tokens, including a BAYC. 

CEO of OpenSea Devin Finzer tweeting, “We have confidence that this was a phishing attack. We don’t know where the phishing occurred, but we’ve been able to rule out a number of things based on our conversations with the 32 affected users.”

According to Engadget, “Finzer, OpenSea determined its website was not a vector for the attack, nor did someone exploit a previously unknown vulnerability in the platform’s NFT minting, buying, selling and listing features.”

The attack seemed to most likely take advantage of the Wyvern Protocol, as per The Verge. This event only adds to the hot water the OpenSea is currently finding themselves in. With plagiarism and scams and insider scandal, this isn’t a good look for the digital assets marketplace.