Critical flaw in OpenSea could allow hackers to steal cryptocurrency from wallets. On OpenSea (a critical vulnerability currently patched), the world’s largest non-convertible token (NFT) marketplace, malicious actors are used to drain cryptocurrency funds from a victim by sending a specially crafted token and opening a new attack vector for exploitation. could be abused. cryptocoin.com as we give details.
Could your crypto be stolen?
The findings come from cybersecurity firm Check Point Research. The firm has launched an investigation into the platform after public reports of stolen cryptocurrency wallets triggered by free airdrop NFTs. Issues were fixed in less than an hour on September 26, 2021. “Vulnerabilities left unpatched could allow hackers to hijack user accounts and steal entire cryptocurrency wallets by creating malicious NFTs,” Check Point researchers said.
As the name suggests, NFTs are unique digital assets such as photos, videos, audio and other items tradable on the blockchain that use technology as a certificate of authenticity to create a verified and public proof of ownership. The way the attack works is to send a malicious NFT to victims. When this NFT is clicked, it results in a scenario where fraudulent transactions can be facilitated by providing a wallet signature through a third-party wallet provider to bind and perform actions on their wallets on behalf of targets. “Users should be overly aware of what they are signing in OpenSea and other NFT platforms and whether it is associated with expected actions,” the researchers said.
OpenSea urged caution
OpenSea said it has not identified any instances of exploiting this vulnerability, but is working with third-party wallet services to help users better identify malicious signature requests, and has also added other initiatives to help users thwart fraud and phishing attacks. Oded Vanunu, head of product vulnerabilities research at Check Point: “Blockchain innovation continues apace and NFTs are here to stay; “Given the pace of innovation, there is an inherent challenge in securely integrating software applications and crypto markets.” Vanunu: “Bad actors know they have an open window to take advantage of now as consumer adoption grows, but security measures in this area still need to catch up.”
Contact us to be instantly informed about the last minute developments. twitter‘in, Facebookin and InstagramFollow and Telegram and YouTube join our channel!
Disclaimer: The articles and articles on Kriptokoin.com do not constitute investment advice. Cryptokoin.com does not recommend buying or selling any cryptocurrencies or digital assets, nor is Kriptokoin.com an investment advisor. For this reason, Kriptokoin.com and the authors of the articles on the site cannot be held responsible for your investment decisions. Readers should do their own research before taking any action regarding the company, asset or service in this article.
Warning: Citing the news content of Kriptokoin.com and quoting by giving a link is subject to the permission of Kriptokoin.com. No content on the site can be copied, reproduced or published on any platform without permission. Legal action will be taken against those who use the code, design, text, graphics and all other content of Kriptokoin.com in violation of intellectual property law and relevant legislation.