Users Targeted With Fake NFT Offers

Key Points:

• Community users have reported receiving Opensea phishing email, with content related to NFT offers.
• Opensea has warned that user emails and developer API keys may be leaked due to supplier attacks.

Numerous users reported receiving Opensea phishing emails, offering NFTs. The OpenSea official warned of possible leaks of user emails and developer API keys due to supplier attacks.

Recently, Wu reported that there has been a surge in reports from community users who have received phishing emails disguised as official communications from Opensea, a leading marketplace for non-fungible tokens (NFTs).

These emails often contain content related to NFT offers. Opensea has previously acknowledged the possibility of user emails and developer API keys being leaked due to attacks on their suppliers.

Opensea recently became the victim of an API leak caused by an unknown third-party vendor. In response, Opensea sent out a series of messages to API users, urging them to protect their accounts from potential abuse by hackers. As a precautionary measure, Opensea clients are required to obtain new API keys, as the third-party vendor’s attack compromised the security of the existing keys.

Opensea Phishing Emails Alert

On September 23, 2023, several users on the X platform shared messages they claimed to have received from Opensea. According to these messages, one of Opensea’s third-party partners experienced a security incident that potentially led to the unauthorized disclosure of application programming interface (API) keys.

As a result of this attack, sensitive information about Opensea clients may have been leaked to malicious actors. The perpetrators could exploit the compromised API keys to make unauthorized requests using the accounts of Opensea users who have paid for certain services. To mitigate the risk, Opensea strongly advises all customers to cease using their current API keys.

The newly generated keys will possess the same permissions and rate limits as the leaked ones, ensuring a seamless transition. API endpoints are crucial for decentralized applications and other third-party services, facilitating efficient and standardized interactions with remote platforms or servers.

As of now, neither the primary Opensea account on X nor its API-centric page has addressed the community’s concerns regarding the API keys issue.

DISCLAIMER: The information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.