In a follow-up tweet later in the day, PROOF vice president of engineering Arran Schlosberg explained that Rose was "phished into signing a malicious signature that allowed the hacker to transfer a large number of high-value tokens."
He went on to explain that when they realized what had transpired, they attempted to use theft prevention tool Revoke Cash, though the scammer has already bulk-transferred tokens out of Rose's wallet. According to the Etherscan link provided, the scammer made off with 40 NFTs, including one Autoglyph; 25 Chromie Squiggles; one QQL Mint Pass; one Admit One pass from gmoney; one Cool Cat NFT; one The Currency NFT by Damian Hirst; one Quantum Key; and several OnChainMonkeys.
Schlosberg said that assets owned by PROOF were "unaffected and not at risk," because they require multiple signatures to move. He added that the team was working with anti-fraud teams from OpenSea and Ledger "and are considering all avenues, including legal."
Rose's hack is the latest in a series of high-value exploits targeting well-known Web3 figures. Earlier this month, Nikhil Gopalani, chief operating officer of Nike (NKE)-owned NFT project RTFKT, and CryptoNovo, a prominent NFT collector, lost NFTs estimated to have been worth hundreds of thousands of dollars to scammers.
UPDATE (Jan. 26, 02:25 UTC): Updates with additional details from Kevin Rose and Arran Schlosberg on the nature of the scam.
The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.