{"id":71871,"date":"2022-12-23T13:44:00","date_gmt":"2022-12-23T11:44:00","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=71871"},"modified":"2025-09-08T11:35:26","modified_gmt":"2025-09-08T08:35:26","slug":"bored-ape-tokens-worth-millions-stolen-from-opensea","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/bored-ape-tokens-worth-millions-stolen-from-opensea\/","title":{"rendered":"Bored Ape tokens worth millions stolen from OpenSea"},"content":{"rendered":"<p>The NFT marketplace OpenSea was hit by a phishing attack, in which hackers stole non-fungible tokens from the Bored Ape Yacht Club (BAYC) collection worth several million dollars. Harpie, a project that tracks on-chain theft, reported this.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Hackers have been able to steal NFTs like magic with a little-known OpenSea feature. It&#8217;s the newest hack, and multiple millions in Apes have been lost to it already.<\/p>\n<p>(\ud83e\uddf51\/4) <a href=\"https:\/\/t.co\/fTK20WQrgh\">pic.twitter.com\/fTK20WQrgh<\/a><\/p>\n<p>\u2014 Harpie (@harpieio) <a href=\"https:\/\/twitter.com\/harpieio\/status\/1606034727491624961?ref_src=twsrc%5Etfw\">December 22, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div>\n<\/figure>\n<p>Researchers say the breach is linked to the ability to sell NFTs without paying a commission.<\/p>\n<p>To execute such a transaction, users must approve a signature request with an unreadable message. This same feature also enables private auctions with non-standard pricing.<\/p>\n<p>Hackers create phishing sites that allegedly require signing an unreadable message under the pretense of logging in. In effect, by signing, the user consents to a private sale of the NFT to the fraudster for 0 ETH.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>&#8220;Hackers were able to steal NFTs using a little-known OpenSea feature. This is the latest hack, and millions of Apes have already been lost because of it,&#8221; Harpie said.<\/p>\n<\/blockquote>\n<p>In August, Immunefi bug-bounty researchers valued 143 BAYC tokens that OpenSea <a href=\"https:\/\/u1f987.com\/en\/news\/immunefi-experts-value-134-stolen-bayc-nfts-at-13-6-million\">flagged as suspicious activity<\/a>, at $13.58 million.<\/p>\n<p>Follow ForkLog&#8217;s bitcoin news on our <a href=\"https:\/\/telegram.me\/forklog\" target=\"_blank\" rel=\"nofollow noopener\">Telegram<\/a> \u2014 cryptocurrency news, prices and analysis.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The OpenSea marketplace was subjected to a phishing attack, in which hackers stole NFTs from the Bored Ape Yacht Club collection worth several million dollars.<\/p>\n","protected":false},"author":1,"featured_media":71872,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1356,1154,1213,1265],"class_list":["post-71871","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-bored-ape-yacht-club","tag-crimes","tag-nft","tag-opensea"],"aioseo_notices":[],"amp_enabled":true,"views":"12","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/71871","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=71871"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/71871\/revisions"}],"predecessor-version":[{"id":71873,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/71871\/revisions\/71873"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/71872"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=71871"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=71871"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=71871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}