World's largest NFT marketplace OpenSea is investigating a “phishing attack”, OpenSea acknowledged on Twitter.
We are actively investigating rumors of an exploit associated with OpenSea related smart contracts. This appears to be a phishing attack originating outside of OpenSea's website. Do not click links outside of https://t.co/3qvMZjxmDB.
— OpenSea (@opensea) February 20, 2022
Co-founder Devin Finzer took to twitter to share some information and allay fears.
I know you’re all worried. We’re running an all hands on deck investigation, but I want to take a minute to share the facts as I see them:
— Devin Finzer (dfinzer.eth) (@dfinzer) February 20, 2022
“We don’t believe it’s connected to the OpenSea website, it appears 32 users thus far have signed a malicious payload from an attacker, and some of their NFTs were stolen," Finzer wrote on Twitter.
"The attack doesn’t appear to be active at this point — we haven’t seen any malicious activity from the attacker’s account in 2 hours. Some of the NFTs have been returned," Finzer added.
Finzer warned users about signing messages and asked them to always 'double check that you are interacting with https://opensea.io in your browser when you sign messages.'
He also dismissed rumors of a $200 million hack and asked affected users to DM @opensea_support so that they can thoroughly investigate.
If you are an affected user, please DM @opensea_support so that we can thoroughly investigate — we’d love your help.
— Devin Finzer (dfinzer.eth) (@dfinzer) February 20, 2022
COMMENTS
Comments are moderated and generally will be posted if they are on-topic and not abusive.
For more information, please see our Comments FAQ