Reddit

<p>In recent developments, users of <a href="https://www.cryptopolitan.com/opensea-investor-reduces-valuation-in-platform-by-90-report/">OpenSea</a>, a leading nonfungible token (NFT) marketplace, have reported a surge in phishing attacks. These attacks, masquerading as official communications from OpenSea, have raised alarms across the platform’s community. Users and developers alike have encountered various deceptive emails, including false developer account risk alerts and fake NFT offers.</p> 
<p>A developer associated with OpenSea revealed on X (formerly known as Twitter) that they received a phishing email aimed at their OpenSea API key. This <a href="https://twitter.com/realScamSniffer/status/1724214900527116630" rel="nofollow noopener" target="_blank">incident</a> suggests a targeted approach, as the email was sent to an address dedicated solely to their OpenSea-related activities. This revelation contradicts OpenSea’s assertions that their platform remains uncompromised.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">beware there are a few email phishing campaigns targeting OpenSea's users and developers recently, including:<br>– fake developer account risk alert<br>– fake offer <a href="https://t.co/cLpoZijFLO" rel="nofollow" target="_blank">pic.twitter.com/cLpoZijFLO</a></p>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1724214900527116630?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">November 13, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Furthermore, on November 14, an OpenSea user expressed their concerns on Reddit about the increasing frequency of these phishing emails. This user, who had not engaged with OpenSea for an extended period, reported receiving multiple emails per day, all containing dubious links and offers.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Correct- there is no smart contract vuln. But unfortunately for <a href="https://twitter.com/opensea?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">@opensea</a> I just received a phishing attempt, to an email that was strictly dedicated to my OpenSea API key. In other words, dev contacts have been exfiltrated from OpenSea and are the real target in this campaign <a href="https://t.co/GD4UgwWIrx" rel="nofollow" target="_blank">https://t.co/GD4UgwWIrx</a> <a href="https://t.co/rtyUJBMlwl" rel="nofollow" target="_blank">pic.twitter.com/rtyUJBMlwl</a></p>— Quantity (@quantity) <a href="https://twitter.com/quantity/status/1724181767643381953?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">November 13, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="opensea-security-breaches">Opensea security breaches</h2> 
<p>This wave of phishing attacks follows a security breach involving one of OpenSea’s third-party vendors in late September 2023. The breach reportedly led to the exposure of user emails and developer API keys. Although OpenSea promptly notified affected users, the incident has evidently had lasting repercussions.</p> 
<p>Previously, in February 2022, OpenSea <a href="https://www.cryptopolitan.com/nft-company-opensea-cautions-users/">confirmed</a> a separate phishing attack originating outside its platform. At that time, the company was also investigating potential exploits linked to its smart contracts. These recurring security challenges highlight the ongoing risks faced by users in the NFT marketplace.</p> 
<p>In response to these threats, cybersecurity experts advise OpenSea users to exercise caution. Users should verify the authenticity of email senders and avoid clicking on untrusted links. It is crucial to remember that legitimate crypto firms will not request personal information, such as wallet addresses or private keys, via email.</p>

OpenSea users targeted in latest phishing scam amid security concerns

Table of Contents

Cryptopolitan_News

Other articles published on Nov 15, 2023

1st Report Of November 2023

The Future of AI-Agents is Decentralized: Delysium and Microsoft Partner to Mainstream AI on Bloc...

ELA Games to showcase industry-leading casino content at SiGMA Malta Europe 2023

Solana (SOL) Retests 18-Month High to Reset Altcoin Gold Standard

Stablecoin shake-up as Tether expands and USDC retreats

Why is the SEC Delaying Bitcoin ETF Approval? Cathie Wood Weighs In

Join our free newsletter for daily crypto updates!