In Latest OpenSea Exploit, Hackers Target NFT Owners on Discord

A phishing attack on OpenSea’s Discord server led some users to click scam links

article-image

Source: Shutterstock

share

key takeaways

  • OpenSea’s marketplace was not directly affected
  • The scam website was not very sophisticated and losses appear to be minimal

The OpenSea Discord server was compromised by scammers early Friday, according to chat records. 

Fake announcements about a partnership with YouTube directed OpenSea community members to a phishing website as scammers sought to trick NFT connoisseurs into minting a new NFT (non-fungible token) series that doesn’t actually exist. Instead, transactions on the suspect site authorized the transfer of NFTs from users’ wallets.

OpenSea confirmed the reports via their official Twitter support account.

Loading Tweet..

The scam messages pointed users to a suspicious website, YouTubeNFT.art, which according to domain records, was registered today with discount domain registrar NameCheap.

Members of the OpenSea Discord community quickly sounded the alarm, and moderators removed the offending announcement channel, as well as a compromised chatbot — but not before some users were taken by the scam.

An apparent vulnerability in the server’s webhooks connection was to blame, according to community members, who also identified the wallet address receiving stolen NFTs. About $20,000 worth of NFTs were transferred to the wallet as of 10:00 am ET, indicating the damage was limited.

OpenSea said fewer than 10 community members were affected.

Loading Tweet..

Other recent attempts to steal NFTs from unsuspecting users have been more successful, including one last month which targeted Bored Ape Yacht Club NFT holders and managed to nab $10 million worth of the tokens.


Don’t miss the next big story – join our free daily newsletter.

Tags

Upcoming Events

Hilton Metropole | 225 Edgware Rd, London

Mon - Wed, March 18 - 20, 2024

Crypto’s premier institutional conference returns to London in March 2024. The DAS: London Experience: Attend expert-led panel discussions and fireside chats Hear the latest developments regarding the crypto and digital asset regulatory environment directly from policymakers and experts.

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Research report - cover graphics (1).jpg

Research

In this report, we dive into crypto private market data to gather insights on where the future of the industry is headed. Despite a notable downturn in private raises, capital continues to infuse promising projects that aim to transform payments, banking, consumer experiences, community, and more, with 2023 being the fourth-largest year for crypto venture capital.

article-image

BUZZ holds shares of Coinbase, Robinhood and MicroStrategy

article-image

Opinion: Even though I didn’t pay for my “Diamond Hands” burger with BTC, don’t let that fool you into thinking that crypto’s development is futile

article-image

The results mark “a major positive inflection point,” one analyst says, as the exchange carries net income momentum into a crypto rally

article-image

While the slate of 10 US spot bitcoin funds have tallied $4.6 billion of net inflows thus far, half of the field is lagging the leaders

article-image

Trading volumes totalled $154 billion in Q4, including $125 billion in institutional volume

article-image

DeFi on Bitcoin is all the rage right now and Stacks is positioned to benefit