Attackers Exploit OpenSea Loophole to Snatch and Resell Rare NFTs

One attacker paid roughly $133,000 for seven NFTs before quickly flipping them for $934,000 worth of ether

article-image

Blockworks exclusive art by Axel Rangel

share

key takeaways

  • Coding bug enabled attackers to buy NFTs at previous sale prices and flip them for substantial profit
  • At least three attackers exploited users, according to blockchain analytics firm Elliptic

A bug in the OpenSea NFT marketplace has enabled hackers to snatch up rare NFTs from owners for far below market value and resell them for hefty profits. 

At least three attackers exploited a bug on the marketplace, making away with over $1 million as of Monday, according to blockchain analytics firm Elliptic. One of the alleged opportunists bought a Mutant Ape Yacht Club NFT for $10,600 worth of ether, selling it hours later for $34,800 worth of ether.

“The exploit appears to originate from the ability to re-list an NFT at a new price, without canceling the previous listing,” Elliptic said in a report. “Those previous listings are now being used to purchase NFTs at prices specified at some point in the past — which is often well below current market prices.”

One attacker, who goes by “jpegdegenlove” online, paid roughly $133,000 for seven NFTs before quickly flipping them on the platform for $934,000 worth of ether. 

Suspicious activity picked up over the past day but the bug has been present for weeks and was flagged in a Jan. 1 tweet. The marketplace was exploited over eight times in a roughly eight-hour-span on Monday morning. A wallet address associated with multiple purchases has made a total profit of $878,288 worth of ether from the exploit, according to blockchain analytics provider Nansen

“The fact that a user could buy at previous prices and flip NFTs without any form of verification points to the centralization issue in NFTs as they stand right now,” Jenna Pilgrim, CEO of blockchain media licensing startup Streambed, told Blockworks.

“OpenSea does a great job at creating a solid user interface, but unfortunately does so at the cost of security,” she added. 

In a turn of events, “jpegdegenlove” later compensated two of their victims, transferring them a combined total of $75,000 worth of ether, according to Elliptic. 

Charles Guillemet, CTO of hardware wallet developer Ledger, said that it is currently not safe for NFT holders to have their assets listed on OpenSea. “It’s very difficult to use this platform securely right now,” he said on a Twitter space Monday. “The only thing we can do is to mitigate the risk.”

OpenSea has yet to publicly address the exploit and did not immediately respond to Blockworks’ request for comment on the matter.


Get the news in your inbox. Explore Blockworks newsletters:

  • Blockworks Daily: The newsletter that helps thousands of investors understand crypto and the markets, by Byron Gilliam.
  • Empire: Start your morning with the top news and analysis to inform your day in crypto.
  • Forward Guidance: Reporting and analysis on the growing intersection of crypto and macroeconomics, policy and finance.
  • 0xResearch: Alpha directly in your inbox. Market highlights, data, degen trade ideas, governance updates, token performance and more.
  • Lightspeed: Built for Solana investors, developers and community members. The latest from one of crypto’s hottest networks.
  • The Drop: For crypto collectors and traders, covering apps, games, memes and more.
  • Supply Shock: Tracking Bitcoin’s rise from internet plaything worth less than a penny to global phenomenon disrupting money as we know it.
Tags

Upcoming Events

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

tg trading bot report graphic.png

Research

Telegram trading bots have found their primary niche in highly speculative token launches and retail-dominated memecoin markets, with many features specifically tailored to token sniping and copy-trading strategies.

article-image

Paradigm’s Charlie Noyes thinks that the attention on stablecoins is well-deserved after Mesh’s $82 million round

article-image

Crypto may benefit from developments during the second quarter after a rough start to the year

article-image

With a friendlier regulatory outlook and the airdrop flow being stemmed, some are looking to how new native tokens can become valuable assets

article-image

The recent action paints an uncertain picture for future monetary policy moves

article-image

Is the finance world becoming “more liquid”? Experts give their takes as TradFi players consider new moves