Connect with us
Active Currencies 14434
Market Cap $2,630,821,578,579.80
Bitcoin Share 50.19%
24h Market Cap Change $-3.51

OpenSea fixes a major vulnerability that could have leaked your identity

3min Read
OpenSea fixes a major vulnerability that could have leaked your identity

Share this article

  • The loophole on OpenSea when successfully exploited could have allowed the attacker to obtain the identities of users.
  • OpenSea quickly fixed the issue after the vulnerability came to the fore.

Cyber security company Imperva detected a major vulnerability on popular NFT marketplace OpenSea, which when successfully exploited, could allow the attacker to obtain the identities of users on the platform.

According to Imperva, the misconfiguration of the iFrame-resizer library used by OpenSea was the main reason behind the vulnerability.

Providing more details about the exploitation mechanism for the issue, Imperva stated that the attacker would send a link through email or SMS.

If the victim clicks on the link, vital information such as the target’s IP address, user agent, device details, and software versions would be retrieved.

Cross-site search vulnerability would then be exploited to get the target’s NFT names and the attacker would then associate the leaked NFT/public wallet address with the email or phone number where the link was initially sent to.

However, Imperva’s report mentioned that OpenSea had fixed the issue after it was reported and the marketplace was no longer at risk of such attacks

Tainted Past

OpenSea has faced serious concerns over the platform’s security in the past. In February 2022, it was at the center of one of the biggest hacks in the NFT ecosystem.

During the exploit, $1.7 million worth of NFTs were stolen from users’ wallets. The breach was acknowledged by OpenSea CEO Devin Finzer.

In less than three months, the marketplace was hit again when its discord channel was compromised. The hackers posted a fake YouTube collaboration news that included a link to a phishing site.

The impact of the hacks made OpenSea take some concrete steps to safeguard its users. Last month, it introduced a grace period of three hours during which sellers will be prevented from accepting offers after a supposed sale.

Trading activity declines

Meanwhile, OpenSea saw a significant dip in the trading activity on the platform since mid-February. The weekly NFT trading plunged 40% until press time, as per data from Token Terminal.

As a consequence of this, the royalties paid to creators also declined. The weekly supply-side fees plunged 40% at the time of writing, which could dissuade interested creators from listing their work on the marketplace.

Source: Token Terminal

OpenSea had been hit hard because of the Blur [BLUR] storm that swept the NFT marketplace ecosystem. As per data from Dune Analytics, OpenSea’s share in the total trading volume across all marketplaces was reduced to 26%.

However, it still managed to hold on to a significant chunk of the user base and the total number of sales, with a dominance of 62.8% and 51% respectively.

Source: Dune Analytics


Saman Waris works as a News Editor at AMBCrypto. She has always been fascinated by how the tides of finance and technology shape communities across demographics. Cryptocurrencies are of particular interest to Saman, with much of her writing centered around understanding how ideas like Momentum and Greater Fool theories apply to altcoins, specifically, memecoins. A graduate in history, Saman worked the sports beat before diving into crypto. Prior to joining AMBCrypto 2 years ago, Saman was a News Editor at Sportskeeda. This was preceded by her stint as Editor-in-Chief at EssentiallySports.
Read the best crypto stories of the day in less than 5 minutes
Subscribe to get it daily in your inbox.
Please check the format of your first name and/or email address.

Thank you for subscribing to Unhashed.