02-21-2022, 12:23 AM
Opensea NFT hack explain Thread
<!-- SC_OFF --><div class="md"><ol> <li><p>28 days ago the hacker uploads a new smart contract, he already knows well that his goal is to get as many signatures as possible</p></li> <li><p>He starts sending emails with phising websites. They tell you to sign a message to login/migrate to the new Opensea smart contract</p></li> </ol> <p>Instead you are signing a private sale (0 eth) of your NFTs to the hacker</p> <ol> <li>Today he executes the smart contract function to steal the NFTs before their listings expire</li> </ol> <p>He can do that because he has your signatures stored on his server</p> <ol> <li>As a final note, always check what you are signing, because one click makes a difference.</li> </ol> <p>You can revoke access to your NFTs from official Etherscan website:</p> <p><a href="https://etherscan.io/tokenapprovalchecker">https://etherscan.io/tokenapprovalchecker</a></p> <p>? All this is what we believe to have happened, but the investigation is still ongoing</p> <p>Details check this Twitter thread ? </p> <p><a href="https://twitter.com/isotile/status/1495234649970421760?s=21">https://twitter.com/isotile/status/1495234649970421760?s=21</a></p> <p>Edit: JUST IN: Over $200M worth of NFTs reportedly stolen from OpenSea phishing hack</p> </div><!-- SC_ON --> submitted by <a href="https://www.reddit.com/user/Frognation777"> /u/Frognation777 </a> <br/> <span><a href="https://www.reddit.com/r/CryptoCurrency/comments/swshf5/opensea_nft_hack_explain_thread/">[link]</a></span> <span><a href="https://www.reddit.com/r/CryptoCurrency/comments/swshf5/opensea_nft_hack_explain_thread/">[comments]</a></span>Kind Regards R
<!-- SC_OFF --><div class="md"><ol> <li><p>28 days ago the hacker uploads a new smart contract, he already knows well that his goal is to get as many signatures as possible</p></li> <li><p>He starts sending emails with phising websites. They tell you to sign a message to login/migrate to the new Opensea smart contract</p></li> </ol> <p>Instead you are signing a private sale (0 eth) of your NFTs to the hacker</p> <ol> <li>Today he executes the smart contract function to steal the NFTs before their listings expire</li> </ol> <p>He can do that because he has your signatures stored on his server</p> <ol> <li>As a final note, always check what you are signing, because one click makes a difference.</li> </ol> <p>You can revoke access to your NFTs from official Etherscan website:</p> <p><a href="https://etherscan.io/tokenapprovalchecker">https://etherscan.io/tokenapprovalchecker</a></p> <p>? All this is what we believe to have happened, but the investigation is still ongoing</p> <p>Details check this Twitter thread ? </p> <p><a href="https://twitter.com/isotile/status/1495234649970421760?s=21">https://twitter.com/isotile/status/1495234649970421760?s=21</a></p> <p>Edit: JUST IN: Over $200M worth of NFTs reportedly stolen from OpenSea phishing hack</p> </div><!-- SC_ON --> submitted by <a href="https://www.reddit.com/user/Frognation777"> /u/Frognation777 </a> <br/> <span><a href="https://www.reddit.com/r/CryptoCurrency/comments/swshf5/opensea_nft_hack_explain_thread/">[link]</a></span> <span><a href="https://www.reddit.com/r/CryptoCurrency/comments/swshf5/opensea_nft_hack_explain_thread/">[comments]</a></span>Kind Regards R