OpenSea a growing online marketplace for NFTs have fallen victim to a phishing attack and are currently running an extensive investigation.
The attack which took place yesterday appears to now be inactive but resulted in 32 users having their NFTs stolen. CEO Devin Finzer has claimed that evidence suggests the attack was conducted outside of the OpenSea marketplace and some of the stolen work has since been returned.
As far as we can tell, this is a phishing attack. We don’t believe it’s connected to the OpenSea website. It appears 32 users thus far have signed a malicious payload from an attacker, and some of their NFTs were stolen.
The attack doesn’t appear to be active at this point — we haven’t seen any malicious activity from the attacker’s account in 2 hours. Some of the NFTs have been returned.
– Devin Finzer, CEO, OpenSea
Devin has also shut down rumours that the hacker got away with $200 and confirmed that they had $1.7 million ETH in their wallet from selling stolen NFTs.
Since the attack Nadav Hollander has come forward to further explain the run-down of the phishing attacks.