1. BITBILIHome
  2. Article

NFT marketplace OpenSea hit by third-party breach

• 223 views

TL;DR Breakdown

  • OpenSea has reportedly suffered a compromise in its API.
  • The breach presents a significant security risk, potentially allowing unauthorized requests on behalf of OpenSea users.
  • The platform has yet to address community concerns publicly, and the incident reflects a similar situation with Nansen.

Description

OpenSea, the renowned multi-blockchain NFT marketplace, has reportedly experienced a compromise in its API, attributed to a breach by an unidentified third-party vendor. This incident has raised substantial security concerns, prompting urgent notifications to platform users. OpenSea is a pivotal player in the NFT marketplace, facilitating transactions across multiple blockchains. However, on September 23, 2023, … Read more

OpenSea, the renowned multi-blockchain NFT marketplace, has reportedly experienced a compromise in its API, attributed to a breach by an unidentified third-party vendor. This incident has raised substantial security concerns, prompting urgent notifications to platform users.

OpenSea is a pivotal player in the NFT marketplace, facilitating transactions across multiple blockchains. However, on September 23, 2023, a wave of users unveiled messages they allegedly received from the platform, indicating a security incident. The notifications highlighted a breach involving one of OpenSea’s third-party partners, potentially leading to the exposure of API keys.

This breach has laid bare sensitive information about OpenSea users, presenting a colossal security risk. The compromised API keys could enable unauthorized requests on behalf of OpenSea users, leading to unwarranted access to services already paid for by legitimate users. In light of this, the marketplace has strongly advised users to deactivate their API credentials promptly. The notifications also mentioned that newly generated keys would inherit the same privileges and limitations as the compromised ones.

API endpoints are crucial conduits for distributed apps and third-party services, enabling standardized and efficient communication with servers or other remote systems. Hence, the alleged breach puts OpenSea’s B2B partners at considerable risk. However, OpenSea has termed the incident an “API keys rotation,” assuring the platform’s partners would not experience any adverse effects.

Moreover, the platform has remained silent on the community’s concerns regarding the API keys issue, with no responses on its main account or API-centric page at the time of reporting. This incident mirrors a similar notification released by Nansen, a prominent analytical platform in the crypto realm, concerning a third-party vendor’s leak of API keys.

Alex Svanevik, the CEO of Nansen, confirmed the involvement of a notable Fortune 500 company as the supplier but refrained from revealing its identity. According to Svanevik, approximately 6.8 percent of Nansen users experienced a compromise in their accounts.

Additionally, the unfolding scenario underscores the vulnerabilities inherent in the interactions between platforms and third-party vendors, emphasizing the need for robust security measures and prompt responsiveness to emerging threats. The lack of communication from OpenSea has only intensified the apprehensions and speculations surrounding the incident.

Disclaimer. The information provided is not trading advice. Cryptopolitan.com holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decision.

文章来源于互联网:NFT marketplace OpenSea hit by third-party breach

Disclaimers:

1. You are solely responsible for your investment decisions and this info is not liable for any losses you may incur.

2. The copyright of this article belongs to the writer, it represents the writer's opinions only, not represents the site's ones. Not financial advice.

Previous 2023年9月24日 18:19
Next 2023年9月24日 19:14

Related articles

  • Hong Kong Extends Invitation to Coinbase and Crypto Companies Amid Regulatory Scrutiny 

    TL;DR Breakdown Hong Kong Legislative Council member Johnny Ng extends an invitation to Coinbase and global virtual asset trading operators to apply for regulatory licenses in Hong Kong. Hong Kong’s decision to allow retail investors to trade cryptocurrencies has sparked increased interest and demand for digital assets, positioning the region as a potential global hub. In the midst of heightened regulatory scrutiny on the crypto market ecosystem in the United States, Hong Kong Legislative Council member Johnny Ng has extended an open invitation to global virtual asset trading operators, including Coinbase, to set up shop in the region.  This move comes as the U.S. Securities and Exchange Commission (SEC) targets Coinbase with charges of violating securities laws, raising concerns among the crypto trading community. In contrast to the regulatory environment in the United States, Hong Kong has recently allowed retail investors to trade Bitcoin (BTC), Ethereum (ETH), and other cryptocurrencies, leading to increased demand for Chinese crypto coins. Contents hide 1 Hong Kong Leader Welcomes Coinbase and Crypto Companies 2 SEC’s Charges Against Coinbase and Regulatory Landscape in the United…

    Article 2023年6月13日

  • Tokenized assets not just for crypto fans anymore

    TL;DR Breakdown Tokenizing real-world assets is not just for major financial entities anymore; smaller crypto-native players are also joining the fray. The interest has expanded from just large institutions to include on-chain entities, like MakerDAO, that tokenize tangible assets. There’s a notable shift in the landscape with decreased interest rates making real-world assets more appealing for yields. Improved tokenization infrastructure is bolstering the appeal and credibility of real-world assets. Description It was once believed that tokenized assets were exclusively the brainchild of crypto-heads and blockchain buffs. But times have changed, and the narrative has taken an unforeseen twist. As we’ve inched closer to the end of this decade, the concept of tokenizing real-world assets (RWA) has captured the attention of not only mammoth financial entities … Read more It was once believed that tokenized assets were exclusively the brainchild of crypto-heads and blockchain buffs. But times have changed, and the narrative has taken an unforeseen twist. As we’ve inched closer to the end of this decade, the concept of tokenizing real-world assets (RWA) has captured the attention of not only…

    Article 2023年9月24日

  • LayerZero and Immunefi unveil $15 million bug bounty program

    TL;DR Breakdown LayerZero and Immunefi have launched a $15 million bug bounty program to enhance their system’s security and reward ethical hackers for identifying potential vulnerabilities. The bug bounty program covers all major chains and rewards up to $250,000 or 10% of the assets’ value at risk for critical vulnerabilities. LayerZero, valued at $3 billion, has remained free of security exploits or hacks since its launch in March 2022, demonstrating its commitment to secure and reliable blockchain interoperability. To further fortify their system against potential threats, cross-chain messaging protocol LayerZero and security platform Immunefi has joined forces to launch an unprecedented $15 million bug bounty program. This initiative, offering a staggering maximum reward for discovering high-severity vulnerabilities, represents one of the largest financial commitments in the history of bug bounty programs. LayerZero, an omnichain interoperability protocol, permits developers to engage with contracts across various blockchains. In this collaborative endeavor with Immunefi, ethical hackers—often called ‘white hat hackers’—will receive financial rewards for identifying and reporting system vulnerabilities and bugs. To qualify for a reward, hackers must provide a proof-of-concept (PoC) demonstrating…

    Article 2023年5月18日

  • Treasury official proposes privacy feature for CBDCs

    TL;DR Breakdown A treasury official has proposed that CBDC should be developed with an element of privacy. Evaluating the implications of a private digital currency. The design of a potential digital dollar should take into account privacy and the ability to transact anonymously, according to a United States Treasury official. Graham Steele, the Assistant Secretary for Financial Institutions at the Treasury Department, emphasized this point during a recent conference focused on payments in Texas. He addressed the Federal Reserve’s FedNow system and central bank digital currencies (CBDCs), highlighting the challenges of minimizing illegal transactions while safeguarding user privacy. The treasury official discusses the importance of anonymity in CBDCs Steele emphasized the importance of preserving privacy and anonymity in the design of any potential retail CBDC. He suggested exploring technologies and methods, including Privacy Enhancing Technologies, that can enable such protections. Recognizing the potential benefits and risks of a CBDC, the treasury official mentioned that it could foster a competitive payment environment. However, he also cautioned that a retail CBDC, directly backed by the Fed, could serve as a safer option…

    Article 2023年6月17日

  • Binance CSO unravels the process of crypto theft on the darknet

    TL;DR Breakdown Binance CSO Jimmy Su has described the step-by-step process of crypto theft in the darknet. Analysts advise crypto users to safeguard their funds and assets. Description In the murky depths of the dark web, a thriving ecosystem of hackers has set their sights on cryptocurrency users with lax security practices. Jimmy Su, the Binance CSO, a leading cryptocurrency exchange, revealed that hackers have shifted their attention to crypto end-users in recent years. While exchanges have bolstered their security measures, hackers adapt … Read more In the murky depths of the dark web, a thriving ecosystem of hackers has set their sights on cryptocurrency users with lax security practices. Jimmy Su, the Binance CSO, a leading cryptocurrency exchange, revealed that hackers have shifted their attention to crypto end-users in recent years. While exchanges have bolstered their security measures, hackers adapt by exploiting the weakest links in the chain. Su described this hacker community as a well-established ecosystem comprising four distinct layers: intelligence gatherers, data refiners, hackers, and money launderers. The Binance CSO lays down the steps in crypto theft…

    Article 2023年7月7日
TOP