NFT News Today
NFT News: OpenSea Discord Server Hacked, Users Warned
NFT News – OpenSea is currently the largest and most extensive NFT marketplace, and unfortunately, the company’s Discord server was hacked.
iexclusivenews reports that Nonfungible token (NFT) marketplace OpenSea suffered a server breach on its main Discord channel. with hackers posting fake “Youtube partnership” announcements.
A screenshot shared on Friday depicts fake collaboration news with a link to a phishing site.
The official Twitter account of OpenSea Support tweeted Friday morning that the marketplace’s Discord server had been hacked. And warned users not to click links in the channel.
The hacker’s initial announcement in the announcements channel stated that OpenSea had “partnered with YouTube to bring their community into the NFT Space.”
[the_ad id=”33485″]
It also stated that they would collaborate with OpenSea to create a mint pass that would allow holders to mint their project for free.
The intruder appears to have been able to stay on the server for an extended period of time before OpenSea staff was able to regain control.
What You Need To Know About The Opensea Hack
This online news outlet understands that the hacker reposted follow-ups to the initial fraudulent announcement.
Rehashing the phony link and claiming that 70% of the supply had already been minted, in an attempt to instill “fear of missing out” in the victims.
[the_ad id=”41670″]
The scammer also attempted to entice OpenSea users by claiming that those who claimed the NFTs would receive “insane utilities” from YouTube.
They claim that this offer is one-of-a-kind and that there will be no further rounds to participate, which is typical of scammers.
As of this writing, on-chain data indicates that 13 wallets have been infiltrated, with the most valued stolen NFT being a Founders’ Pass worth about 3.33 ETH ($8,982.58).
[the_ad id=”41664″]
iexclusivenews understands that in initial reports, the hacker used webhooks to get access to server controls.
A webhook is a server plugin that allows other software to get real-time data from the server.
Hackers are increasingly using webhooks as an attack vector since they allow them to send messages from official server accounts.
The OpenSea Discord server isn’t the only one that uses webhooks.
In early April, a similar weakness allowed the hacker to utilize official server identities to post on several popular NFT collections’ channels. Including Bored Ape Yacht Club, Doodles, and KaijuKings.