Some users on non-fungible token (NFT) marketplace OpenSea were targeted with a phishing attack that resulted in the users losing NFTs worth about $1.7 million, according to the company.
(Sign up to our Technology newsletter, Today’s Cache, for insights on emerging themes at the intersection of technology, business and policy. Click here to subscribe for free.)
OpenSea co-founder and CEO Devin Finzer had initially noted that some of the NFTs of 32 users were stolen by an attacker. However, the company later confirmed that it narrowed down the list of impacted individuals to 17.
“Rumours that this was a $200 million hack are false. The attacker has $1.7 million of ETH in his wallet from selling some of the stolen NFTs,” Finzer said in a tweet.
The New York-based firm said it believed that this phishing attack originated outside OpenSea website and it “does not appear to be active” with “no activity on the malicious contract” in over 15 hours.
Also Read | Twitter brings NFT profile picture feature
“All of the malicious orders contain valid signatures from the affected users, indicating that they did sign an order somewhere, at some point in time. However, none of these orders were broadcast to OpenSea at the time of signing,” OpenSea CTO Nadav Hollander, tweeted.
The phishing attack affected the users when the NFT marketplace was in the process of upgrading to the new Wyvern smart contract system, which according to the firm, would help address the inactive listings issue on Ethereum. OpenSea, however, clarified that the migration tool is safe to use.
“None of the malicious orders were executed against the new (Wyvern 2.3) contract, indicating that they were signed before the migration and are unlikely to be related to OpenSea’s migration flow,” Hollander explained.
Also Read | Irregular sales worth billions fire up wild NFT market
Though users who are concerned can un-approve access to their NFT collection, Finzer said.
OpenSea, which is one of the largest NFT marketplaces, raised $300 million in January in a Series C funding at a $13.3 billion post-money valuation, according to a blog post.
NFTs have grown in popularity during the last year, with the sales volumes of these blockchain-based digital assets touching billions of dollars in 2021.