Cryptocurrency

Tweet by cr0ssETH

2022-01-28 [vendor] OpenSea listing bug continues [chain] ethereum
Primary Source ↗
Blockchain(s) Ethereum

Incident Details

OpenSea began reimbursing users who lost money earlier this month through what some have described as a bug with the platform, but which others argue is just a misunderstanding on the users’ end. People were able to buy NFTs that had previously been listed at much lower prices, even though those listings didn’t appear active to the seller anymore, if the seller had failed to properly remove the listing. The buyers were then able to flip the NFTs for massive profits, and OpenSea ended up reimbursing users to the tune of about $1.8 million. However, there are still many NFTs vulnerable to this, and people taking advantage of it, including one user who named their account “opensee_​will_​refund_​ask_​them”.

Technical Details

Initial Attack Vector
Software bug / unintentional loss
Vendor / Product
OpenSea listing bug continues

Timeline

  1. 2022-01-28 Breach occurred
  2. 2022-01-28 Publicly disclosed