OpenSea Rov qab $ 1.8M hauv Ethereum rau cov neeg siv uas poob NFTs Los ntawm 'Inactive Listing' Exploit

OpenSea tam sim no tau them rov qab 750 Ethereum, txog $ 1.8 lab, rau cov neeg siv uas tau muag khoom NFT muaj txiaj ntsig zoo hauv qab lawv cov nqi lag luam los ntawm kev siv nyiaj nrog "cov npe tsis ua haujlwm. "

Tsis ntev los no, ntau tus neeg siv ntawm cov thawj Nft› khw muag khoom tau yws tias lawv cov xim xiav nti NFTs, xws li cov khoom ntawm Bored Ape Yacht Club (BAYC) sau, tau yuav ntawm cov laus, cov npe pheej yig. Cov npe no yeej tsis tau muab tso tseg ntawm blockchain, txawm tias tus neeg siv interface ntawm OpenSea qhia tias lawv tau ua.

Qhov no tshwm sim li cas? Tech-savvy buyers tau siv cov kev pab cuam xws li Tornado Nyiaj ntsuab los funnel nyiaj mus rau hauv lub hnab nyiaj crypto chaw nyob yam tsis tau nthuav tawm qhov chaw thiab siv cov nyiaj no los yuav NFTs ntawm cov npe qub.

Qhov kev siv no tsis yog tshiab. Cov Ethereum blockchain xav kom cov neeg siv them tus nqi roj rau kev ua lag luam, suav nrog tshem tawm cov npe ntawm OpenSea uas tseem tsis tau tas sijhawm. Tab sis ua ntej OpenSea tau siv cov hnub tas sij hawm xaiv tau ntawm cov npe, ntau tus neeg tuav NFT muaj cov npe tsis muaj npe uas tsis muaj hnub tas sij hawm thiab yog li xav tau kev tshem tawm ntawm cov nqi them roj. Cov ntawv teev npe tas sij hawm yog qhov zoo, tab sis cov npe tsis ua haujlwm ua rau muaj kev pheej hmoo.

Hauv kev sib zog kom tsis txhob them cov nqi roj Ethereum, uas feem ntau tuaj yeem khiav mus rau ntau pua duas las rau ib qho kev sib pauv, qee tus tswv NFT pom qhov tsis txaus. Yog tias lawv pauv NFT mus rau lub hnab nyiaj thib ob, thiab tom qab ntawd rov qab mus rau thawj lub hnab nyiaj, cov npe tau ploj mus ntawm OpenSea UI. 

Tab sis qhov tseeb, cov npe tau yooj yim dhau los ntawm "active" mus rau "tsis ua haujlwm." Thiab cov npe tsis muaj zog tseem tuaj yeem yuav los ntawm cov kws tshaj lij blockchain uas cuam tshuam ncaj qha nrog cov ntawv cog lus ntse lawv tus kheej, tsis yog OpenSea's UI. 

Hauv kev teb, OpenSea dov tawm qhov "tsis muaj npe" feature ntawm nws lub vev xaib desktop ntawm Lub ib hlis ntuj 24. Lawv tsis teb rau Decrypt's yav dhau los thov rau kev tawm tswv yim. 

Qee tus tuav BAYC tau hais los ntawm OpenSea ua ntej lub lim tiam no tias lawv yuav tau rov qab qee qhov Ethereum rau lawv qhov poob. Tballer, uas poob Ape #9991 rau 0.77 ETH (kwv yees $ 1,700), hais rau Decrypt Lub Ib Hlis 25 tias nws xav tias nws tau txais "cov lus teb qeeb qeeb" los ntawm OpenSea tab sis nws "zoo siab lawv tau rov qab los rau kuv." 

"Lub zej zog [NFT] tau pab kuv dhau qhov no," Tballer hais Decrypt. "Hmo hmo tau tshwm sim kuv tau ze heev mus tsev thiab muag txhua yam." 

Tballer's Ape tam sim no zoo li koom nrog Juan Fdez, leej twg yuav ob ntawm Apes uas tau muag tsis pom kev. Fdez tseem tuav BAYC #8924, uas tau rub tawm rau 6.66 ETH (kwv yees $ 17,000). Fdez tsis teb rau Decrypttus thov rau saib.

Yog tias Tballer xav kom nws Ape rov qab, nws yuav tau them 130 ETH ($ 330,000).

Tballer's Ape muaj tus tswv tshiab.

Thaum Lub Ib Hlis 26, OpenSea tau xa email rau NFT cov tswv nrog cov npe tsis muaj npe qhia lawv kom "thov ua sai sai kom tshem tawm cov npe tsis muaj npe."

Cov lus qhia no tau ua rau qee qhov kev txhawj xeeb, raws li NFT tus neeg sau Dingaling tau sib cav hauv a ntev Twitter xov tias email yog "tsis muaj kev lav phib xaub ntawm lawv feem thiab ua rau yam 100x phem dua. Qhov no ua rau qhov kev siv tau yooj yim dua los ua. "

Los ntawm tsuas yog qhia cov neeg siv kom tshem tawm cov npe tsis muaj npe ib qho los ntawm ib qho ntawm OpenSea lub vev xaib, nws tau tso cai rau cov neeg siv los ua kev yuav khoom ntawm lwm cov npe tsis muaj npe. Piv txwv li, Mutant Ape Yacht Club tuav Swolfchan khaws lawv Ape hauv lawv lub hnab nyiaj loj thiab tshem tawm 15 ETH cov npe tsis muaj npe. Tom qab ntawd, lawv tau npaj tshem tawm 6 ETH npe. 

Tab sis nyob rau hauv nruab nrab ntawm lub sij hawm nws coj Swolfchan tshem tawm thawj inactive npe thiab tsiv mus rau lub thib ob, ib tug exploiter yuav lawv Ape rau 6 ETH nqi. 

Dingaling tau piav qhia tias yog tias Swolfchan hloov Ape mus rau lwm lub hnab nyiaj, tom qab ntawd tshem tawm tag nrho cov npe, tom qab ntawd txav Ape rov qab mus rau lub hnab nyiaj loj, lawv yuav muaj kev nyab xeeb. Tab sis OpenSea tsis tshwm sim los muab cov lus qhia no hauv nws thawj email.

OpenSea co-founder Alex Kev hais rau Dingaling thaum Lub Ib Hlis 27 tias "kev kho qhov teeb meem no yog peb lub tuam txhab #1 tseem ceeb. Peb muaj ib pab neeg ua haujlwm rau nws thiab teeb tsa kev ntsuas tam sim no. "

Raws li cov kev daws teeb meem no tuaj yeem yog, Ledger CTO Charles Guillemet muaj ob peb lub tswv yim: "Ib qho kev tsim txawv tuaj yeem zam qhov teeb meem no," nws hais. Decrypt. Guillemet sib cav tias UI ntawm OpenSea yuav tsum tau pom tseeb dua rau cov neeg siv. Nws tau hais tias "Kev hloov pauv NFT yuav tsum tsis txhob tshem tawm qhov kev txiav txim muag ntawm UI," nws hais. 

Tau qhov twg los: https://decrypt.co/91513/opensea-refunds-ethereum-users-lost-nfts-inactive-listing-exploit