Fortune

Security

<figure> 
 <figcaption>
 Cover image via <a href="https://u.today/" rel="noopener noreferrer nofollow">U.Today</a> 
 </figcaption> 
</figure> 
OpenSea, a top-tier marketplace for non-fungible tokens (NFTs) became the second victim of an API leak by unknown "third-party vendor." It sent a series of messages to API users to prevent their accounts from being abused by hackers. 
<h2 id="opensea-clients-have-to-claim-new-api-keys-as-third-party-vendor-attacked">OpenSea clients have to claim new API keys as third-party vendor attacked</h2> 
Today, Sept. 23, 2023, a number of X users shared messages they allegedly received from OpenSea, a multi-blockchain NFT marketplace. As per the message, one of third-party partners of OpenSea experienced a "security incident" that might have resulted in a leak of application programming interface (API) keys. 
<blockquote> 
 🔐 Security Alert: OpenSea API Keys at Risk 🔐OpenSea warns of a potential API key leak due to a supplier's security incident. Developers, replace your keys for safety. Stay secure! <a href="https://twitter.com/hashtag/OpenSea?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#OpenSea</a> <a href="https://twitter.com/hashtag/SecurityAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#SecurityAlert</a> <a href="https://twitter.com/hashtag/APIKeys?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#APIKeys</a> <a href="https://t.co/HuckoREoL3" rel="noopener noreferrer nofollow">pic.twitter.com/HuckoREoL3</a>— Obi Crypto (@ObiCrypto_) <a href="https://twitter.com/ObiCrypto_/status/1705516481512173805?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 23, 2023</a> 
</blockquote> 
Due to this attack, information about OpenSea clients is likely leaked to attackers. Also, the malefactors can abuse the API keys to leverage requests OpenSea users paid for. 
That's why the marketplace urges all of its customers to stop using their effective API keys. Newly generated keys will have the same rights and rate limits as the leaked ones, the message says. 
API endpoints are used by decentralized applications and other third-party services for streamlined, standardized interaction with a remote platform or server. As such, the alleged OpenSea API leak might threaten its B2B partners. 
At the same time, OpenSea calls the campaign an "API keys rotation" and does not expect the incident to necessarily affect the partners of the platform. 
<h2 id="opensea-remains-silent-about-alleged-leak">OpenSea remains silent about alleged leak</h2> 
By printing time, neither the main OpenSea account on X nor its API-centric page have addressed community concerns regarding the API keys issue. 
It should also be noted that a couple of days ago, Nansen, a leading analytical platform in crypto, shared the same message about API keys being exposed by a third-party vendor. 
Nansen CEO Alex Svanevik also avoided sharing the name of the provider, but admitted that it is an established company from the Fortune 500 list. 
<blockquote> 
 🚨 Important update from us at Nansen. Please take a moment to read this. <a href="https://t.co/syKE0sNnC6" rel="noopener noreferrer nofollow">pic.twitter.com/syKE0sNnC6</a>— Nansen 🧭 (@nansen_ai) <a href="https://twitter.com/nansen_ai/status/1705137387838574904?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 22, 2023</a> 
</blockquote> 
A total of 6.8% of Nansen users had their accounts affected, Svanevik added.

Alert: OpenSea API Keys Leaked

Table of Contents

U_Today

Other articles published on Sep 23, 2023

Harga BTC Berisiko Jatuh ke US$23.000 Sebelum Halving

Unlocking the Power of Fibonacci in Trading 💹

NFTxLV: Your Ultimate Blockchain Adventure in Las Vegas

LINK Stands Out and May Continue to Rise in the Next 24-48 Hours

Amgen Inc. (NASDAQ: AMGN) Boosts Strength, Will it Reach $300?

Quarter Billion SHIB Destroyed, 191 Million SHIB Burned in One Go

Join our free newsletter for daily crypto updates!