{"id":56461,"date":"2022-01-24T14:51:01","date_gmt":"2022-01-24T12:51:01","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=56461"},"modified":"2025-09-04T06:31:34","modified_gmt":"2025-09-04T03:31:34","slug":"opensea-vulnerability-nets-user-347-eth","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/opensea-vulnerability-nets-user-347-eth\/","title":{"rendered":"OpenSea vulnerability nets user 347 ETH"},"content":{"rendered":"<p>OpenSea NFT marketplace users were warned about a vulnerability that allows buying expensive tokens at undervalued prices.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">BREAKING: Everyone head to <a href=\"https:\/\/t.co\/nRpSAHivfe\">https:\/\/t.co\/nRpSAHivfe<\/a><br \/>and make sure all of your old listings are cancelled. There is currently an exploit on <a href=\"https:\/\/twitter.com\/opensea?ref_src=twsrc%5Etfw\">@opensea<\/a> letting someone buy your NFTs for old listing prices. This is happening right now!!<\/p>\n<p>\u2014 Hustler (@0xHustler) <a href=\"https:\/\/twitter.com\/0xHustler\/status\/1485526989255577601?ref_src=twsrc%5Etfw\">January 24, 2022<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>A user going by the pseudonym jpegdegenlove was implicated in exploiting the OpenSea <span data-descr=\"application programming interface\" class=\"old_tooltip\">API<\/span> vulnerability on the Rarible platform. According to<a href=\"https:\/\/etherscan.io\/address\/0xb1a22cc48f6784f629a994917cd6474923630c48#internaltx\"> Etherscan<\/a>, the manipulation earned him 347 ETH ($784,830 at the time of writing).<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">A user named jpegdegenlove on OpenSea is suspected of using the vulnerability to buy low and sell high, making a profit of more than 250 ETH. The NFTs involved include BAYC #9991, BAYC #8924, MAYC #4986, etc. <a href=\"https:\/\/t.co\/H1IJiZkl2Z\">https:\/\/t.co\/H1IJiZkl2Z<\/a> <a href=\"https:\/\/t.co\/cc4djcIWEj\">https:\/\/t.co\/cc4djcIWEj<\/a> <a href=\"https:\/\/t.co\/3aMpc6mI7H\">pic.twitter.com\/3aMpc6mI7H<\/a><\/p>\n<p>\u2014 Wu Blockchain (@WuBlockchain) <a href=\"https:\/\/twitter.com\/WuBlockchain\/status\/1485547347203428352?ref_src=twsrc%5Etfw\">January 24, 2022<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>On December 31, 2021, the founder of freshdrops drew attention to the bug and urged OpenSea to fix it. He said that delisting a token from the platform incurs an additional fee, the size of which can be substantial given the drop in the collection&#8217;s value. In addition to the thread, the author noted that this concerns gas costs.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">1. OS doesn\u2019t charge a delisting fee, it\u2019s the cost of gas to remove the listing from the blockchain. <br \/>OS is not pocketing ETH to delist an item.<\/p>\n<p>\u2014 cap10bad.\u039eTH | freshdrops.io (@cap10bad) <a href=\"https:\/\/twitter.com\/cap10bad\/status\/1485568871297953798?ref_src=twsrc%5Etfw\">January 24, 2022<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Users found a workaround \u2014 when transferring the NFT to an external wallet, it disappears from the marketplace listing. However, the token remains available for purchase on Rarible via the OpenSea API at the old price if it is returned to the original wallet.<\/p>\n<p>However, freshdrops noted that this is not an OpenSea error as such. According to him, the problem is that \u201cthe NFT holder cannot see these listings anywhere to cancel them\u201d.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">4. This is not a bug, per se, on OS\u2019s part. The issue is that there is nowhere obvious for an NFT holder to see these listings to cancel them. <br \/>IMHO, the obvious place they should be displayed is where the holder created the listing, on OS.<\/p>\n<p>\u2014 cap10bad.\u039eTH | freshdrops.io (@cap10bad) <a href=\"https:\/\/twitter.com\/cap10bad\/status\/1485568875521523717?ref_src=twsrc%5Etfw\">January 24, 2022<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<div class=\"wp-block-text-wrappers-update-2 article_update\"><time class=\"gtb_text-wrappers_update_time\">January 25, 2022 | 17:45<\/time><span class=\"gtb_text-wrappers_update_head\">Update: <\/span><\/p>\n<p>OpenSea said it has launched a new feature to view and cancel listings.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">What\u2019s going on:<br \/>Listings made a long time ago are resurfacing when items transfer back into lister\u2019s wallets. <\/p>\n<p>What we did:<br \/>We can\u2019t cancel these orders for listers, so to fix the problem, we launched a new listings manager today.<a href=\"https:\/\/t.co\/jy2sUhaBUA\">https:\/\/t.co\/jy2sUhaBUA<\/a> <a href=\"https:\/\/t.co\/6b8lHmkEYN\">pic.twitter.com\/6b8lHmkEYN<\/a><\/p>\n<p>\u2014 OpenSea (@opensea) <a href=\"https:\/\/twitter.com\/opensea\/status\/1485757970017230848?ref_src=twsrc%5Etfw\">January 24, 2022<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>In a comment to The Block, a representative of the marketplace said that OpenSea changed the default listing duration from six to one month.<\/p>\n<p>OpenSea also plans to notify users when transferring tokens tied to an active listing from their wallet. A spokesperson said that \u201cOpenSea is actively engaging with those affected and reimbursing their costs\u201d.<\/p>\n<\/div>\n<p>Earlier, the number of OpenSea users <a href=\"https:\/\/u1f987.com\/en\/news\/openseas-active-user-base-tops-1-million\">surpassed 1 million<\/a>.<\/p>\n<p>From January 1 to January 17, 2022, the marketplace&#8217;s trading volume reached $3.52 billion \u2014 a figure <a href=\"https:\/\/u1f987.com\/en\/news\/opensea-nft-marketplace-trading-volume-tops-3-billion-since-early-august\">the established<\/a> maximum set in August 2021.<\/p>\n<p>In September 2021, an OpenSea bug <a href=\"https:\/\/u1f987.com\/en\/news\/opensea-error-burned-42-nfts-worth-about-100000\">led to the destruction of 42 NFTs<\/a> worth $100,000.<\/p>\n<p>Follow ForkLog news on VK!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>OpenSea NFT marketplace users were warned about a vulnerability that allows buying expensive tokens at undervalued prices.<\/p>\n","protected":false},"author":1,"featured_media":56462,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1213,1265],"class_list":["post-56461","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-nft","tag-opensea"],"aioseo_notices":[],"amp_enabled":true,"views":"20","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/56461","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=56461"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/56461\/revisions"}],"predecessor-version":[{"id":56463,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/56461\/revisions\/56463"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/56462"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=56461"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=56461"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=56461"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}