In Latest OpenSea Exploit, Hackers Target NFT Owners on Discord

A phishing attack on OpenSea’s Discord server led some users to click scam links

article-image

Source: Shutterstock

share

key takeaways

  • OpenSea’s marketplace was not directly affected
  • The scam website was not very sophisticated and losses appear to be minimal

The OpenSea Discord server was compromised by scammers early Friday, according to chat records. 

Fake announcements about a partnership with YouTube directed OpenSea community members to a phishing website as scammers sought to trick NFT connoisseurs into minting a new NFT (non-fungible token) series that doesn’t actually exist. Instead, transactions on the suspect site authorized the transfer of NFTs from users’ wallets.

OpenSea confirmed the reports via their official Twitter support account.

Loading Tweet..

The scam messages pointed users to a suspicious website, YouTubeNFT.art, which according to domain records, was registered today with discount domain registrar NameCheap.

Members of the OpenSea Discord community quickly sounded the alarm, and moderators removed the offending announcement channel, as well as a compromised chatbot — but not before some users were taken by the scam.

An apparent vulnerability in the server’s webhooks connection was to blame, according to community members, who also identified the wallet address receiving stolen NFTs. About $20,000 worth of NFTs were transferred to the wallet as of 10:00 am ET, indicating the damage was limited.

OpenSea said fewer than 10 community members were affected.

Loading Tweet..

Other recent attempts to steal NFTs from unsuspecting users have been more successful, including one last month which targeted Bored Ape Yacht Club NFT holders and managed to nab $10 million worth of the tokens.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the On the Margin newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

MON - TUES, OCT. 7 - 8, 2023

Blockworks and Bankless in collaboration with buidlbox are excited to announce the second installment of the Permissionless Hackathon – taking place October 7-8 in Salt Lake City, Utah. We’ve partnered with buidlbox to bring together the brightest minds in crypto for […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Unlocked by Template.png

Research

With the spot ETH ETF approval, the institutions are coming. stETH - given its dominance in marketshare, existing liquid market structures, and highly desirable properties - is poised for institutions.

article-image

Plus, the rise of RWAs could bring about a significant shift in how real-world investments are managed and accessed

article-image

The distributed cell plan provider started selling its own hotspots in October 2023

article-image

The Brazil-based asset manager’s filing comes during a year of milestone bitcoin and ether fund approvals

article-image

The purchase of five sites in Georgia set to help CleanSpark hit its mid-year operating hash rate target of 20 EH/s

article-image

Plus, it’s beginning to look like we may be in for a cruel summer

article-image

Sponsored

Engaging with XDC provides access to cutting-edge financial tools and places investors at the forefront of the trade finance revolution