# OpenSea Phishing

**Published by:** [xuanling11](https://paragraph.com/@xuanling11/)
**Published on:** 2022-02-21
**URL:** https://paragraph.com/@xuanling11/opensea-phishing

## Content

Photo by Marek Piwnicki on UnsplashOpenSea has experienced a phishing scam. Such an attack hooked over 640 ETH in assets from 32 users with the label Fake_Phishing5169. TL;DR The OpenSea phishing attack has a lesson learned to us. Should we still want a company to provide free service for us or should we find another alternative who can really provide free service in Web3 vision? Phishing AttackIt appears that Wyvern contract is a loophole for attackers to enter previously saved transfer calldata and token addresses to steal creators’ NFTs without actually signing from their own wallet.OpenSea Migration No to mention that OpenSea is in the process of migrating their listings from the old contract to a new contract Wyvern 2.3 to prevent a different type of exploit. Not Connected to WebsiteThe CEO insisted that their website has no flaw but others disagreed to point out the flaw in their code. OpenSea NFT Marketplace Many people may think OpenSea is a decentralized NFT marketplace. It is more than just an NFT marketplace. OpenSea was planning to IPO recently and they compared themselves to Web2 companies like Lyft. They even recruited Lyft to become their first CFO to prepare an IPO. Such moves bring the company backward into Web2 rather than Web3 company. The recent phishing attack makes it worse. People wonder if it is still a place to list their NFTs or possible to find another place to list new NFTs. In Conclusion The OpenSea phishing attack is a warning to investors and crypto enthusiasts. If the company cannot admit their error, how can they provide service to their customers as Web3 company should do?

## Publication Information

- [xuanling11](https://paragraph.com/@xuanling11/): Publication homepage
- [All Posts](https://paragraph.com/@xuanling11/): More posts from this publication
- [RSS Feed](https://api.paragraph.com/blogs/rss/@xuanling11): Subscribe to updates
- [Twitter](https://twitter.com/xuanling11): Follow on Twitter