1. BITBILIHome
  2. Article

NFT marketplace OpenSea hit by third-party breach

• 46 views

TL;DR Breakdown

  • OpenSea has reportedly suffered a compromise in its API.
  • The breach presents a significant security risk, potentially allowing unauthorized requests on behalf of OpenSea users.
  • The platform has yet to address community concerns publicly, and the incident reflects a similar situation with Nansen.

Description

OpenSea, the renowned multi-blockchain NFT marketplace, has reportedly experienced a compromise in its API, attributed to a breach by an unidentified third-party vendor. This incident has raised substantial security concerns, prompting urgent notifications to platform users. OpenSea is a pivotal player in the NFT marketplace, facilitating transactions across multiple blockchains. However, on September 23, 2023, … Read more

OpenSea, the renowned multi-blockchain NFT marketplace, has reportedly experienced a compromise in its API, attributed to a breach by an unidentified third-party vendor. This incident has raised substantial security concerns, prompting urgent notifications to platform users.

OpenSea is a pivotal player in the NFT marketplace, facilitating transactions across multiple blockchains. However, on September 23, 2023, a wave of users unveiled messages they allegedly received from the platform, indicating a security incident. The notifications highlighted a breach involving one of OpenSea’s third-party partners, potentially leading to the exposure of API keys.

This breach has laid bare sensitive information about OpenSea users, presenting a colossal security risk. The compromised API keys could enable unauthorized requests on behalf of OpenSea users, leading to unwarranted access to services already paid for by legitimate users. In light of this, the marketplace has strongly advised users to deactivate their API credentials promptly. The notifications also mentioned that newly generated keys would inherit the same privileges and limitations as the compromised ones.

API endpoints are crucial conduits for distributed apps and third-party services, enabling standardized and efficient communication with servers or other remote systems. Hence, the alleged breach puts OpenSea’s B2B partners at considerable risk. However, OpenSea has termed the incident an “API keys rotation,” assuring the platform’s partners would not experience any adverse effects.

Moreover, the platform has remained silent on the community’s concerns regarding the API keys issue, with no responses on its main account or API-centric page at the time of reporting. This incident mirrors a similar notification released by Nansen, a prominent analytical platform in the crypto realm, concerning a third-party vendor’s leak of API keys.

Alex Svanevik, the CEO of Nansen, confirmed the involvement of a notable Fortune 500 company as the supplier but refrained from revealing its identity. According to Svanevik, approximately 6.8 percent of Nansen users experienced a compromise in their accounts.

Additionally, the unfolding scenario underscores the vulnerabilities inherent in the interactions between platforms and third-party vendors, emphasizing the need for robust security measures and prompt responsiveness to emerging threats. The lack of communication from OpenSea has only intensified the apprehensions and speculations surrounding the incident.

Disclaimer. The information provided is not trading advice. Cryptopolitan.com holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decision.

文章来源于互联网:NFT marketplace OpenSea hit by third-party breach

Disclaimers:

1. You are solely responsible for your investment decisions and this info is not liable for any losses you may incur.

2. The copyright of this article belongs to the writer, it represents the writer's opinions only, not represents the site's ones. Not financial advice.

Previous 2023年9月24日 18:19
Next 2023年9月24日 19:14

Related articles

  • China central bank to cut reserve ratio for foreign exchange deposits 

    TL;DR Breakdown China’s central bank plans to reduce mandatory foreign currency reserves amid a 5% decline in the renminbi against the US dollar in 2023. China policymakers have accelerated the introduction of new measures to bolster the country’s currency and economy, focusing on the property sector. The People’s Bank of China will reduce banks’ foreign exchange reserve requirement from 6% to 4%, effective September 15. Description China’s central bank plans to reduce the mandatory foreign currency reserves held by financial institutions, which reflects their commitment to bolster the weakening renminbi. The currency has declined by over 5% against the US dollar this year, mainly due to concerns surrounding China’s economic recovery, which has been sluggish since they lifted COVID-19 restrictions at … Read more China’s central bank plans to reduce the mandatory foreign currency reserves held by financial institutions, which reflects their commitment to bolster the weakening renminbi. The currency has declined by over 5% against the US dollar this year, mainly due to concerns surrounding China’s economic recovery, which has been sluggish since they lifted COVID-19 restrictions at the…

    Article 2023年9月1日

  • UK inflation could halve soon, seeing an ease in families pressure, Chancellor says

    TL;DR Breakdown Chancellor Jeremy Hunt confidently sees UK inflation halve and believes his strategy to tackle rising UK costs will alleviate household financial strain. The Office for National Statistics has substantially revised UK growth figures upward, indicating a faster recovery from the pandemic than previously thought. Rachel Reeves MP argues that moving from no growth to low growth is not cause for celebration. Description Chancellor Jeremy Hunt has expressed confidence in his strategy to address the rising UK costs and believes that it’s beginning to yield results that will soon ease the financial strain on households. Acknowledging the continued financial challenges many households face across the country, Hunt emphasized the need for persistence with the inflation-curbing plan as the … Read more Chancellor Jeremy Hunt has expressed confidence in his strategy to address the rising UK costs and believes that it’s beginning to yield results that will soon ease the financial strain on households. Acknowledging the continued financial challenges many households face across the country, Hunt emphasized the need for persistence with the inflation-curbing plan as the most effective way…

    Article 2023年9月3日

  • U.S. recession could be great for markets -How?

    The anticipation of a U.S. economic recession, which might seem counterintuitive at first, could, in fact, avert a significant market downturn in the latter half of 2023. Michael Yoshikami, the founder and CEO of Destination Wealth Management, presents this interesting viewpoint. This article investigates the rationale behind Yoshikami’s prediction and the broader market implications. Counterintuitive as it may seem: A potential recession as the market’s lifeline Consumer price inflation in the U.S. reduced to 4.9% on a yearly basis in April, the most sluggish annual pace since the same month the previous year. This latest data from the Labor Department was widely received as an encouraging indicator that the Federal Reserve’s strategic measures to control inflation are making progress. However, the core Consumer Price Index (CPI), which doesn’t account for variable food and energy prices, exhibited a 5.5% increase annually in April. This happened against the backdrop of a robust economy and a persistently strained labor market. Despite the CPI witnessing a substantial cool-off since it hit an apex of 9% in June 2022, it continues to hover significantly above…

    Article 2023年5月29日

  • Voyager Digital’s financial turmoil attracts cunning scammers

    TL;DR Breakdown Fraudulent actors targeted patrons of the insolvent cryptocurrency brokerage, Voyager Digital, as they briefly gained a window of opportunity to withdraw portions of their funds.  One of the tactics employed involved luring customers with deceptive promises of significant returns through counterfeit websites.  The deception extended to fraudulent letters, calls, and emails, bearing the name of the platform’s CEO Stephen Ehrlich, falsely inflating returns through the counterfeit website. Description In a shocking turn of events, fraudulent actors targeted patrons of the insolvent cryptocurrency brokerage, Voyager Digital, as they briefly gained a window of opportunity to withdraw portions of their funds. The scammers employed a range of cunning tactics, as detailed in a report by Bloomberg, with promises of elevated returns through counterfeit websites being … Read more In a shocking turn of events, fraudulent actors targeted patrons of the insolvent cryptocurrency brokerage, Voyager Digital, as they briefly gained a window of opportunity to withdraw portions of their funds. The scammers employed a range of cunning tactics, as detailed in a report by Bloomberg, with promises of elevated returns through…

    Article 2023年8月3日

  • Crypto payment platform Alphapo breached, over $23M in crypto vanishes

    TL;DR Breakdown Alphapo, a crypto payment platform, has been hacked and drained of $23 million in Bitcoin, Ethereum, and Tron Alphapo client HypeDrop disables withdrawals Description Alphapo, a crypto payment platform, has been hacked and drained of $23 million in Bitcoin, Ethereum, and Tron. ZachXBT, a crypto analyst, identified and reported the loss from the platform’s hot wallets today. The attackers executed a complex attack on Alphapo’s hot wallets, giving them control over the user funds on numerous blockchains without authorization. … Read more Alphapo, a crypto payment platform, has been hacked and drained of $23 million in Bitcoin, Ethereum, and Tron. ZachXBT, a crypto analyst, identified and reported the loss from the platform’s hot wallets today. The attackers executed a complex attack on Alphapo’s hot wallets, giving them control over the user funds on numerous blockchains without authorization. ZachXBT explains that it was difficult to track the transactions since the stolen money was transferred to Ethereum and bridged to the Avalanche network and Bitcoin. Alphapo client HypeDrop disables withdrawals Alphapo processes payment for gambling services, such as Bovada, Ignition,…

    Article 2023年7月23日
TOP