Digital Asset
Intelligence
Security Incident · NFT

OpenSea Phishing Attack: $3.40M Reported Loss

·Historical incident record

Incident Overview

According to OpenSea's official tweet, hackers sent phishing emails to all users' mailboxes at the same time as the OpenSea contract was upgraded. Many users mistakenly thought it was an official email and authorized the wallet, which resulted in the wallet being stolen. OpenSea co-founder and CEO Devin Finzer confirmed the phishing attack in a tweet.

Sources & References

Original incident referencehttps://twitter.com/dfinzer/status/1495302784689704966 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    OpenSea

    Attack methodListing mechanism loopholes
    Reported loss347 ETH
  2. Incident date
    Target

    OpenSea

    Attack methodAccount Compromise
    Reported lossNot disclosed
  3. Incident date
    Target

    OpenSea

    Attack methodMalicious Code Injection Attack
    Reported lossNot disclosed
  4. Incident date
    Target

    MOX

    Attack methodContract Vulnerability
    Reported lossNot disclosed
  5. Incident date
    Attack methodRug Pull
    Reported loss$ 800,000