OpenSea Investigating $1.7M Worth Phishing Hack

Major NFT marketplace OpenSea has reportedly fallen victim to an ongoing phishing attack within hours after announcing a week-long planned upgrade to delist inactive NFTs on the platform. OpenSea Investing Recent Phishing Attack Following a series of viral tweets from panicked NFT traders, leading marketplace OpenSea clarified that it was investigating the so-called phishing hack. The attack occurred during OpenSea’s migration to its new Wyvern smart contract system, which began on Friday and is set to be completed by Feb. 25. Around 10:50 p.m. ET, OpenSea CEO Devin Finzer followed up in a tweet that ’32 users thus far have signed a malicious payload from an attacker, and some of their NFTs were stolen,’ adding that the company is ‘not aware of any recent phishing emails that have been sent to users,’ suggesting a fraudulent website may be to blame. As far as we can tell, this is a phishing attack. We don’t believe it’s connected to the OpenSea website. It appears 32 users thus far have signed a malicious payload from an attacker, and some of their NFTs were stolen. — Devin Finzer (dfinzer.eth) (@dfinzer) February 20, 2022 Planned Smart Contract Upgrade OpenSea had planned to revise its smart contract by releasing a brand-new contract on Friday. The upgraded contract was intended to ensure old, inactive listings on the platform would eventually expire. What was initially thought to be official OpenSea emails about the migratio...