{"id":56830,"date":"2022-01-30T16:33:14","date_gmt":"2022-01-30T14:33:14","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=56830"},"modified":"2025-09-04T08:28:36","modified_gmt":"2025-09-04T05:28:36","slug":"opensea-reimbursed-users-affected-by-a-vulnerability-to-more-than-1-9-million","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/opensea-reimbursed-users-affected-by-a-vulnerability-to-more-than-1-9-million\/","title":{"rendered":"OpenSea reimbursed users affected by a vulnerability to more than $1.9 million"},"content":{"rendered":"

The OpenSea marketplace has reimbursed users who suffered losses due to a vulnerability in the NFT listing function on the platform, totaling 750 ETH (about $1.95 million at the time of writing). Bloomberg<\/a> reports, citing the company.<\/p>\n

On December 31, 2021, the founder of the freshdrops pointed to a bug<\/a>, enabling purchases of expensive tokens at undervalued prices.<\/p>\n

OpenSea operates an expedited listing of assets \u2014 after a set period, the tokens are removed from sale. However, before this mechanism was introduced, delisting NFTs was performed manually and required additional gas fees, which in some cases could be quite high.<\/p>\n

To avoid the fee, users found a workaround \u2014 by transferring the token to an external wallet and back to the original, it stops appearing in the OpenSea interface. But in such cases, the delisting is not recorded on the blockchain, so the NFT remains available for purchase through the API<\/span>, which is used by marketplaces such as Rarible.<\/p>\n

This method allowed purchases at old prices well below their current value. To address the issue, OpenSea launched the view-and-cancel listings feature, reduced the default listing duration from six months to one month, and notified users of the need to delist.<\/p>\n

The latter measure drew criticism in the community. A collector going by the handle Dingaling stressed that OpenSea’s instructions ‘facilitate carrying out the exploit.’ According to him, the first step is to transfer assets to an external wallet.<\/p>\n

\n

2\/ This is the email that Opensea sent out a few hours ago to users who still had \u00abinactive listings\u00bb on their accounts. Basically they are asking you to cancel old listings that you have on your NFTs that are still fulfillable, because they are unable to cancel them for you. pic.twitter.com\/Fgd854Dezj<\/a><\/p>\n

\u2014 dingaling (@dingalingts) January 27, 2022<\/a><\/p><\/blockquote>\n