The world’s largest digital marketplace for crypto collectibles and non-fungible tokens, OpenSea, announced that it is investigating a scam targeting users of its NFT platform.
OpenSea posted a tweet saying that it appears to be the target of a phishing attack originating outside of OpenSea’s website.
We are actively investigating rumors of an exploit associated with OpenSea related smart contracts. This appears to be a phishing attack originating outside of OpenSea’s website. Do not click links outside of https://t.co/3qvMZjxmDB.
— OpenSea (@opensea) February 20, 2022
Following the warning, the firm’s CEO Devin Finzer went on Twitter and said that the company is “not aware of any recent phishing emails that have been sent to users,” and suggested a fraudulent website may be to blame.
As far as we can tell, this is a phishing attack. We don’t believe it’s connected to the OpenSea website. It appears 32 users thus far have signed a malicious payload from an attacker, and some of their NFTs were stolen.
— Devin Finzer (dfinzer.eth) (@dfinzer) February 20, 2022
According to reports, the hacker has stolen roughly $3 million in assets, which includes popular NFTs like Bored Apes, Azuki and CloneX.
On Saturday evening, Benzinga warned OpenSea users not to migrate their NFTs until further clarity.
URGENT WARNING: Reports of NFTs being stolen on OpenSea from users manually migrating their NFTs. DO NOT MIGRATE YOUR NFTs UNTIL FURTHER…
