Hundreds on NFTs stolen in phishing attack targeting OpenSea users
Hundreds of nonfungible tokens have been stolen from NFT marketplace OpenSea with a value of at least $1.7 million.
The theft took place between 5 p.m. and 8 p.m. EST on Saturday and involved 32 users. According to a tweet Saturday by Devin Finzer, co-founder and chief executive of OpenSea, the thefts involved a phishing attack, as affected users signed a malicious payload from an attacker.
Those affected are said to have received fake emails from the attacker purporting to be official emails from OpenSea asking them to migrate their Ethereum listings to a new smart contract. To complicate matters further, OpenSea is actually in the process of asking users to migrate their NFTs from the Ethereum blockchain to a new smart contract, making the emails seem to be legitimate.
