NFT marketplace OpenSea has been allegedly hacked according to the rumors. The rumors suggested that the hacker stole $200 million from the company. An investigation revealed that the attacker phished $1.7 million Ethereum into his wallet. But OpenSea has refuted the hacking attack.
Taking to Twitter, OpenSea disclosed that it was exploring the specific details of the phishing attack. OpenSea also confirmed that the attack does not appear to be email-based, rather, it is an independent incident affecting a small number of people. The corporation alleges that allegations that its codebase had been compromised and attackers had stolen over $200 million drew its attention.
Furthermore, Devin Finzer, the co-founder and CEO of OpenSea, stated in a Twitter thread that this is a phishing attack as far as he knows. We don't think it has anything to do with the OpenSea website. It seems that 32 users have accepted a malicious payload from an intruder, and some of their NFTs have been stolen as a result.
As far as we can tell, this is a phishing attack. We don’t believe it’s connected to the OpenSea website. It appears 32 users thus far have signed a malicious payload from an attacker, and some of their NFTs were stolen.
— Devin Finzer (dfinzer.eth) (@dfinzer) February 20, 2022
He also indicated that his team approached dozens of users and teams in the NFT area and that he believes the attack was a phishing attempt. He went on to say that OpenSea was now working diligently with users whose things had been taken to narrow down a selection of commonly visited websites that could have been the source of the fraudulent signatures.
Additionally, Finzer also stated that the attack did not appear to be ongoing. He confirmed that for a few hours, the company has not seen any suspicious attacks from the attacker's account. He also advised users to be wary of fake websites and to check that the URL in their browser reads opensea.io.
The attack doesn’t appear to be active at this point — we haven’t seen any malicious activity from the attacker’s account in 2 hours. Some of the NFTs have been returned.
— Devin Finzer (dfinzer.eth) (@dfinzer) February 20, 2022