OpenSea Says Phishing Attack Impacted 17 Users

The attack also no longer appears to be active because there has been no activity on the malicious contract for over 15 hours.

AccessTimeIconFeb 21, 2022 at 12:10 p.m. UTC
Updated Feb 22, 2022 at 8:00 p.m. UTC

Jamie Crawley is a CoinDesk news reporter based in London.

Non-fungible tokens (NFT) marketplace OpenSea said 17 users were impacted by the Sunday's phishing attack instead of the 32 users that was reported earlier.

  • The phishing attack was targeting smart contracts on OpenSea's platform.
  • "Our original count included anyone who had interacted with the attacker, rather than those who were victims of the phishing attack," the marketplace tweeted on Monday.
  • The attack also no longer appears to be active, as there has been no activity on the malicious contract for over 15 hours, the company said.
  • OpenSea is still yet to determine the exact source of the phishing attack first detected in the early hours of Sunday morning, following rumours circulating of an exploit of smart contracts on the platform.
  • CEO Devin Finzer subsequently tweeted that 32 users had "signed a malicious payload from an attacker, and some of their NFTs were stolen."
  • Blockchain security company PeckShield said that the exploit was "most likely phishing", whereby users authorized the migration of their NFTs to a new smart contract allowing them to be stolen. NFTs are digital assets on a blockchain that represent ownership of virtual or physical items.
  • OpenSea is among the most prominent platforms in the NFT world, with a recent $300 million investment round valuing it at $13.3 billion. It has seen $3.77 billion of trading volume in the last 30 days, according to data from DappRadar.

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

CoinDesk - Unknown

Jamie Crawley is a CoinDesk news reporter based in London.

CoinDesk - Unknown

Jamie Crawley is a CoinDesk news reporter based in London.

Trending

1
CoinDesk - Unknown
Three Arrows Paper Trail Leads to Trading Desk Obscured Via Offshore Entities

As Three Arrows Capital collapsed under market pressure, its much-lesser known trading desk, TPS Capital, remained active, sources say. But a complex ownership structure might frustrate creditors' efforts to collect.

CoinDesk - Unknown
2
CoinDesk - Unknown
June Was Bitcoin’s Worst Month Ever

Plus, European crypto regulation comes into view.

CoinDesk - Unknown
3
CoinDesk - Unknown
What Traders Are Saying About Bitcoin's Biggest Monthly Loss in 11 Years

Poor macroeconomic sentiment, fears of inflation and systemic risks from the crypto market pushed the cryptocurrency below 2017’s highs.

CoinDesk - Unknown
4
CoinDesk - Unknown
Three Arrows Capital Files for Bankruptcy in New York Tied to British Virgin Islands Proceeding

A British Virgin Islands court ordered Three Arrows' BVI branch into liquidation earlier this week.

CoinDesk - Unknown