NFT marketplace OpenSea had some serious security flaws

Cybersecurity researchers have helped fix security flaws on the OpenSea NFT marketplace that could have been exploited by attackers to hijack users’ cryptocurrency wallets.

Check Point (CP) researchers unearthed the critical security issues on one of the world’s largest NFT marketplace after spotting reports of people claiming to have all their cryptos stolen after receiving a free gift on the platform.

“Such examples, along with others that reported different scams within this marketplace motivated our researchers to look (and find!) vulnerabilities within the platform, which could have allowed scammers and hackers to hijack accounts and steal the crypto currencies from the digital wallets,” share CP researchers Dikla Barda, Roman Zaikin & Oded Vanunu in a joint blog post.

  • Shield yourself with these best identity theft protection services
  • We’ve put together a list of the best endpoint protection software
  • Check our list of the best firewall apps and services

The researchers add that OpenSea was responsive to their queries and collaborated with the researchers to help seal off all attack vectors.

Engineering impatience

OpenSea allows anyone to create art, in one of several popular multimedia formats, and sell them on its marketplace.

The researchers used this to create an art in SVG format with a malicious payload that enabled them to communicate with the platform’s default cryptocurrency wallet, MetaMask.

Engadget reports that the attack relied on user inattention and the fact that OpenSea already generates a lot of pop-ups. The attack worked by sending a malicious NFT to the victim, which when opened triggered several pop-ups including one requesting access to the victim’s cryptocurrency wallet.

“You should always be careful when receiving requests to sign your wallet online. Before you approve a request; you should carefully review what is being requested and consider whether the request is abnormal or suspicious,” warn the users, advising users to reject any requests that seem even mildly suspicious.

  • Protect your devices with these best antivirus software

Via Engadget

Internet Explorer Channel Network
News Related

OTHER NEWS

How to watch Star Trek: Prodigy online from anywhere now

This new show from Paramount Plus promises to go where no Star Trek animated series has gone before. Devised for a younger audience, this cinematic adventure series will be the ... Read more »

Digital IC on Singpass app can be used for public services from 1 Nov

Singpass‘ new Digital IC interface. (SCREENSHOT: GovTech) SINGAPORE — Singaporeans who forget to bring their NRIC cards for government services will have an alternative means to prove their identity, with ... Read more »

Hyundai Steel swings to profits in Q3

SEOUL, Oct. 28 (Yonhap) — Hyundai Steel Co. on Thursday reported its third-quarter net profit of 595.9 billion won (US$509.1 million), turning from a loss of 44.7 billion won a ... Read more »

Apple will soon tell iPhone users what data is collected by apps

After making a lot of developers squeamish and at the same time giving users more choice about their privacy, Apple is set to bring another feature to iPhone that’s bound ... Read more »

Russian Spacecraft Launches Into Orbit for International Space Station

The Russian space agency Roscosmos successfully launched an uncrewed cargo spacecraft aboard a Soyuz rocket to the International Space Station on October 28. Footage released by NASA shows liftoff from ... Read more »

Samsung warns supply chain upsets may hit chip demand, profit at 3-year high

Samsung Electronics Co Ltd said on Thursday it expects component shortages to affect chip demand from some customers in the final three months of the year, after reporting its highest ... Read more »

US consumer watchdog to review Big Tech data, promote lending competition

Chief consumer finance watchdog Rohit Chopra told U.S. lawmakers on Wednesday his agency will review Big Tech’s impact on the flow of money in the economy as leading technology firms ... Read more »

Climate change misinformation fools too many people – but there are ways to combat it

Hadrian/Shutterstock In recent decades, people in the UK have watched climate change shift from being an abstract threat discussed on the news to an increasingly common presence in everyday life. ... Read more »

Lotte Chilsung Beverage Q3 net profit up 177.3 pct. to 92.5 bln won

SEOUL, Oct. 28 (Yonhap) — Lotte Chilsung Beverage Co. on Thursday reported its third-quarter net profit of 92.5 billion won (US$78.9 million), up 177.3 percent from a year earlier. Operating ... Read more »

Hyundai Development shifts to black in Q3

SEOUL, Oct. 28 (Yonhap) — Hyundai Development Co. on Thursday reported its third-quarter net profit of 43.8 billion won (US$37.4 million), shifting from a loss of 74.9 billion won a ... Read more »

Esports talent in Korea gets boost from big business, easing of gaming ban

People play online games at an internet cafe in Seoul. Korea Times file South Korean teenager Yoon Ki-chan gets just three hours of sleep a day but spends more than ... Read more »

How Microsoft nearly overtakes Apple as most valuable company

A surge in Microsoft Corp’s shares nearly unseated Apple Inc as the world’s most valuable company, a day before the iPhone maker reports its quarterly results. Fueled by strong quarterly ... Read more »

Here's how Google aims to take on the Apple iPad

It’s no secret that when it comes to tablets, the iPad remains a few steps ahead of its Android counterparts. And a lot of it is down to the software ... Read more »

'Aadhaar Hackathon 2021' starts today: Theme, rules, prizes and all you need to know

The ‘Aadhaar Hackathon 2021’ consists of problem statements categorized under two broad themes – Address Update and Authentication Reimagined. (Representative image: Reuters) The Unique Identification Authority of India (UIDAI) has ... Read more »

Amazon app quiz October 28, 2021: Get answers to these five questions to win Rs 20,000 in Amazon Pay balance

Win Rs 20,000 in your Amazon Pay balance today! You just have to answer 5 questions and a bit of luck. Amazon is back with its daily dose of app ... Read more »

Samsung smartphones getting this feature for faster digital payments

Samsung has launched a new Scan QR feature that allows users to make digital payments easily. The feature enables users to make QR code payments by opening the camera or ... Read more »

What to look out for before buying Intel's 12th Gen Alder Lake CPUs

Intel‘s 12th Gen Alder Lake i9 and i5 CPUs (Photo: Yahoo Gaming SEA) Well, the cat is out of the bag. Intel’s 12th Gen Alder Lake processors are official and ... Read more »

Naver unveils new AI-powered search service

By Kim Han-joo SEOUL, Oct. 28 (Yonhap) — South Korea’s dominant internet portal operator Naver Corp. on Thursday introduced a new personalized search service dubbed AiR Search. The service, powered ... Read more »

Retail sales up 8.2 pct in September on 'revenge shopping' amid pandemic

SEOUL, Oct. 28 (Yonhap) — Retail sales in South Korea surged 8.2 percent in September from a year earlier, data showed Thursday, as consumers turned to “revenge shopping” amid the ... Read more »

SK Innovation to develop all-solid-state batteries with US firm

Dr. Lee Seong-jun, chief technology officer of SK Innovation Co., poses for a photo with Doug Campbell, CEO of Solid Power, after signing a deal on joint development and production ... Read more »

SK Innovation to develop all-solid-state batteries with U.S. firm

By Kim Seung-yeon SEOUL, Oct. 28 (Yonhap) — SK Innovation Co., a South Korean battery maker, said Thursday it will develop and produce all-solid-state batteries with a U.S. firm, in ... Read more »

Hanwha Life Insurance net soars 154% despite pandemic

The corporate logo of Hanwha Life Insurance Co. (Yonhap)Major South Korean insurer Hanwha Life Insurance Co. said Thursday its third-quarter net profit rose more than 1.5 times from a year ... Read more »

Digital IC in Singpass app can be used to access public services in person from Nov 1

From Nov 1, all government agencies will accept digital ICs when individuals use or apply for public services in person. SINGAPORE – Forgot to bring your NRIC for registering at ... Read more »

(LEAD) Hanwha Life Insurance net soars 154 pct despite pandemic

(ATTN: RECASTS headline, lead; ADDS info throughout, image) SEOUL, Oct. 28 (Yonhap) — Major South Korean insurer Hanwha Life Insurance Co. said Thursday its third-quarter net profit rose more than ... Read more »

S-Oil Q3 net soars elevenfold on strong petrochem sales

(Yonhap)S-Oil Corp., South Korea’s No. 3 oil refiner, said Thursday its net income surged by elevenfold in the third quarter from a year earlier, driven by strong sales of petrochemical ... Read more »

(LEAD) S-Oil Q3 net soars elevenfold on strong petrochem sales

(ATTN: RECASTS headline, lead; UPDATES throughout; ADDS photo, byline) By Kim Seung-yeon SEOUL, Oct. 28 (Yonhap) — S-Oil Corp., South Korea’s No. 3 oil refiner, said Thursday its net income ... Read more »

Android 12L is a new version for big screens on tablets and foldables

Read more »

Search engine choice screen to stop Google

Internet users in Australia would be asked to choose a search engine from a mandatory screen as part of efforts to break up Google's dominance. The Australian Competition and Consumer ... Read more »

(LEAD) Samsung logs record sales, second-highest operating profit in Q3 on buoyant chip biz

(ATTN: CHANGES headline; ADDS more details in last 10 paras)By Woo Jae-yeon SEOUL, Oct. 28 (Yonhap) — Samsung Electronics Co. on Thursday reported strong third-quarter earnings on the continued robust ... Read more »

Hanwha Systems Q3 net income down 0.5 pct. to 31.2 bln won

SEOUL, Oct. 28 (Yonhap) — Hanwha Systems Co. on Thursday reported its third-quarter net income of 31.2 billion won (US$26.6 million), down 0.5 percent from a year earlier. The company ... Read more »

Samsung Engineering Q3 net profit up 42.6 pct. to 97.9 bln won

SEOUL, Oct. 28 (Yonhap) — Samsung Engineering Co. on Thursday reported its third-quarter net income of 97.9 billion won (US$83.5 million), up 42.6 percent from a year earlier. Operating profit ... Read more »

Cryptocurrency start-ups dangle high yields to tap digital token holders' idle assets

An increasing number of start-ups in Hong Kong are offering cryptocurrency-lending services, claiming to provide high returns. However, as regulations on such blockchain-based decentralised finance (DeFi) are unclear, industry observers ... Read more »

Thai police: Woman cut rope holding painters 26 floors high

BANGKOK (AP) — A resident of a high-rise condominium in Thailand cut the support rope for two painters, apparently angry she wasn't told they would be doing work, and left ... Read more »

Watch Dr. Pimple Popper cut out a 'Bloomin' Onion' cyst in bite-sized pieces, leaving behind a deep hole

Hollis Johnson/Insider Dr. Pimple Popper treated a man with a deep cyst on the back of his neck. The patient said the bump had been growing for 25 to 30 ... Read more »

Ofcom receives hundreds of complaints over Steve Allen's Tilly Ramsay comments

Steve Allen – pictured in 2019 (PA) Broadcasting watchdog Ofcom has received 840 complaints about LBC radio host Steve Allen after derogatory remarks about Strictly Come Dancing star Tilly Ramsay. ... Read more »

Kyle Beach comes forward as John Doe in Blackhawks investigation

With courage to come forward and speak openly about his experience in 2010 with the Chicago Blackhawks, “John Doe” has revealed his identity. Kyle Beach, a first-round draft selection of ... Read more »

Kate Hudson flaunts toned abs in Breast Cancer Awareness Month photo

Looking for more celebrity and entertainment news? Sign up for Yahoo Lifestyle Canada’s newsletter! Kate Hudson is stripping down for a great cause. The 42-year-old actress took to Instagram on ... Read more »

SNT Motiv Q3 net income up 29.8 pct. to 22.7 bln won

SEOUL, Oct. 28 (Yonhap) — SNT Motiv Co. on Thursday reported its third-quarter net profit of 22.7 billion won (US$19.4 million), up 29.8 percent from a year earlier. The company ... Read more »

SAS appoints Lim Hsin Yin as Managing Director for Singapore

Lim has previously held leadership positions at Dell Technologies, Avaya and IBM. Read more »

Naver says leadership change is under review

Naver CEO Han Seong-sook is expected to resign and accept a new post in Europe, after serving more than four years as the CEO. Korea Times file IT giant sets ... Read more »
On free-english-test.com you will find lots of free English exam practice materials to help you improve your English skills: grammar, listening, reading, writing, ielts, toeic