Skip to main content

Security team creates dashboard to detect potential NFT hacks in OpenSea

The team flagged almost $25 million worth of NFTs hacked through offline signatures at the time of writing.

A wallet security team released a real-time dashboard that lets community members detect, track and monitor potential nonfungible token (NFT) hacks using offline signatures in the OpenSea marketplace. 

According to the team behind crypto wallet ZenGo, they created an NFT hack detector using a simple method. This includes tracking realized NFT trades in the NFT marketplace and comparing the trade amount of the NFT collection’s floor price. If the ratio between the two trade values is suspiciously low, it will get flagged as a potential hack.

ZenGo wallet dashboard for detecting NFT hacks. Source: Dune Analytics

At the time of writing, the dashboard flagged almost $25 million worth of NFTs hacked through offline signatures. Tal Be’ery, the chief technology officer of ZenGo, also told Cointelegraph that this type of hack differs from others in two ways. 

First, this type of hack does not have a general way of showing the meaning of the messages users must sign. This means that users must “blindly trust” the message and “blindly sign them.“ In addition, Be’ery also explained that this type of hack involves platforms’ contracts and argued that platforms share some responsibilities in these cases.

Related: Here’s how to prevent NFT theft, according to industry professionals

When asked about potential solutions for this problem within the community, the wallet executive claimed there’s currently no good solution. He explained that:

“Users can use some proprietary browser extensions that give some visibility into some offline signatures, but does not cover all offline signatures and needs to be updated whenever a new form of offline signature is added.”

According to the ZenGo team, they’ve also started working with the Ethereum Foundation, various decentralized applications, and other wallets to support a draft Ethereum Improvement Proposal (EIP) that fixes the issue if implemented. Be’ery said:

“The EIP allows a contract to describe the exact meaning of the offline signature, such that the wallet app can display it to the user and then the user can make an informed decision on whether or not they want to sign the offline signature and don’t need to blindly sign.”

Similarly, the other entities within the community have also been issuing warnings over gasless transactions on OpenSea. On Dec. 23, anti-theft project Harpie warned the community about a private auction scam that threatens users of the NFT marketplace. The scam also involves blindly approving signatures.

Comments

Post a Comment

Popular posts from this blog

Dogecoin Forecasted to Hit $1: Here's When

Image
Dogecoin, initially conceived as a humorous cryptocurrency, has witnessed a notable surge in both popularity and market value throughout its existence. The asset managed to reach a peak of $0.1063 earlier in the same week. However, at press time, DOGE was trading at $0.09657 with a 5% daily drop. Market Dynamics and Open Interest A pivotal factor propelling Dogecoin ’s recent surge lies in the notable increase in notional open interest linked to DOGE futures and perpetual futures contracts. According to data from CoinGlass, there has been a remarkable 58% surge in open interest over the preceding week, reaching a substantial $625 million. This figure stands as the highest since Nov. 2, 2022, and industry experts contend that this surge, coupled with the rising price, validates a significant upward trend in the market. The Path to $1 As Dogecoin gains momentum and successfully breaches various resistance levels, the prevailing question among investors centers on its potential to at
Read more

SEC sues Kraken crypto exchange due to illegal operation

The U.S. Securities and Exchange Commission has filed a lawsuit against Kraken, accusing it of illegal securities operations. According to Reuters, the SEC accused the platform of illegally operating as a securities exchange without first registering with the regulator. The SEC said Payward Inc. and Payward Ventures Inc., operating under the name Kraken, have made hundreds of millions of dollars since 2018 by organizing the buying and selling of cryptocurrencies while “turning a blind eye” to securities laws designed to protect investors. The crypto currency exchange was also accused of insufficient internal controls and poor record keeping, partly reflected by commingling clients’ money with its own and paying operating expenses directly from clients’ accounts. “Kraken’s choice of malicious profits over investor protection is one we see far too often in this space.” Gurbir Grewal, SEC enforcement chief In a statement, Kraken said the SEC’s complaint acknowledges that any all
Read more

Robinhood increases crypto trading volume by 75% in Nov.

Investment firm Robinhood has released a report on some of its operating activity for Nov. 2023.  According to the document, the volume of cryptocurrency trading on the platform increased by 75% compared to October. Financial turnover from transactions with shares and option contracts remained at the same level as in Oct. 2023. Robinhood representatives also noted that over the past month customers made deposits amounting to $1.4 billion into the company’s accounts. “In November 2023, customers contributed roughly $1.4 billion of net deposits to Robinhood. Additionally, November equity notional trading volume s and options contracts traded were roughly in line with October 2023 levels, and November crypto notional trading volume s were roughly 75% above October 2023 levels.  Robinhood report The firm plans to release a detailed operating report for the fourth quarter of 2023 in the coming weeks. You might also like: Robinhood carries out third round of layoffs Robin
Read more