Ethereum

Bitcoin

Security

Read

<p class="is-style-lead">All stolen Bored Ape Yacht Club (BAYC) and Mutant Ape Yacht Club (MAYC) nonfungible tokens (NFTs) from the NFT Trader platform have been recovered following a $267,000 bounty payment.</p> 
<p>On Dec. 16, a <a href="https://crypto.news/p2p-platform-nft-trader-breached-asks-users-to-revoke-approval/">security breach</a> on the peer-to-peer platform NFT Trader led to the theft of NFTs worth nearly $3 million.</p> 
<p>The attacker, in public messages, <a href="https://etherscan.io/tx/0xc2f91dbab46531732908a317290e18297670d0bb02bb66f94aa883ec448d9391" target="_blank" rel="noopener">claimed </a>to have capitalized on an exploit initially used by another user, demanding a ransom for the return of the stolen NFTs. They <a href="https://twitter.com/BoringSecDAO/status/1736224566970892543" target="_blank" rel="noopener">insisted </a>on a payment of 120 Ether (<a href="https://crypto.news/price/ethereum/">ETH</a>), equivalent to around $267,000 at the time, to return the NFTs.</p> 
<p>Responding swiftly, Boring Security, a non-profit web3 security project funded by ApeCoin, spearheaded a community initiative that secured the return of all assets in under 24 hours after complying with the ransom demand.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">All 36 BAYC and 18 MAYC that the exploiter had are now in our possession.<br><br>We sent her 10% of the floor price of the collections as bounty. We will be working with the affected victims getting them back to them free of charge.<br><br>Right after this coffee break…<br><br>Victims please…</p>— Boring Security (@BoringSecDAO) <a href="https://twitter.com/BoringSecDAO/status/1736263558852497534?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 17, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Boring Security, in a statement on X, confirmed the recovery of all 36 BAYC and 18 MAYC NFTs. The payment to the hacker amounted to 10% of the floor price of the collections, as agreed upon.</p> 
<p>The bounty was paid by Greg Solano, co-founder of <a href="https://crypto.news/tag/yuga-labs/">Yuga Labs</a>. The company is the creator of both the NFTs collections and supported negotiations to recover the tokens and return them to their original owners for free.</p> 
<p> You might also like: <a href="https://crypto.news/vc-giant-tiger-global-reportedly-cut-stakes-in-opensea-and-nft-collection-bayc/"> VC giant Tiger Global reportedly cut stakes in OpenSea and NFT collection BAYC </a> </p> 
<p>The breach was traced back to a <a href="https://crypto.news/smart-contract-exploit-in-time-token-leads-to-188k-loss/">vulnerability introduced by a smart contract</a> upgrade 11 days prior. This upgrade enabled the misuse of a multicall feature, leading to unauthorized NFT transfers. The loophole was identified by “Foobar,” a pseudonymous founder and developer of Delegate, who also helped NFT Trader’s team halt the attack.</p> 
<p>Following the incident, calls were made urging users to revoke permissions granted to two old contracts identified as potential security risks. The revoked approvals were essential to prevent possible future thefts of the NFTs.</p> 
<h2 class="wp-block-heading" id="boring-security-urges-regular-training-against-nft-hacks">Boring Security urges regular training against NFT hacks</h2> 
<p>Boring Security, acknowledging the complexity of self-custody in decentralized finance, emphasized the need to understand the mechanisms of <a href="https://crypto.news/tag/web3/">web3</a>. They highlighted the strides made by Ethereum developers in enhancing user-friendly interfaces but stressed the importance of being vigilant in managing digital assets.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">As we finish up getting these apes back to their rightful owners, I just want to give a huge shoutout to the team for working overtime this weekend to come together on this. The DAO is comprised of dozens of individuals, and are all here to further the mission of web3 security…</p>— Boring Security (@BoringSecDAO) <a href="https://twitter.com/BoringSecDAO/status/1736561876971262142?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 18, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>With over 80 partnerships in the NFT space, Boring Security has been advocating for a culture of security in web3. Their approach includes free, instructor-led training sessions. They also urged community leaders to adopt various measures to bolster security.</p> 
<p>These measures include creating whitelists for security-educated individuals, integrating security modules into community access requirements, and training moderators in security protocols.</p> 
<p>Additionally, Boring Security proposed incentives like hosting special Proof of Attendance Protocol (POAP) events and offering bonuses for completing security classes or activities to encourage participation in security education.</p> 
<p>The firm called upon community leaders to collaborate in enhancing and safeguarding their communities, inviting them to share insights and seek guidance.</p> 
<p> Read more: <a href="https://crypto.news/u-s-agency-identified-bitcoin-inscriptions-as-cybersecurity-risk/"> US agency identified Bitcoin inscriptions as cybersecurity risk </a> </p>

NFT Trader recovers stolen Bored Apes with $267k bounty payment

Table of Contents

crypto.news

Other articles published on Dec 18, 2023

Bitcoin Faces Resistance as Price Drops Below $42,000 – Will Bulls Prevail?

Cryptocurrency Analyst Expresses High Optimism for Bitcoin ETF Approval

Adobe and Figma Mutually Terminate $20B Deal After Regulatory Concerns

Digital Asset Investment Products Experience $16 Million Outflows, Breaking 11-Week Inflow Streak

Bitcoin To Hit All-Time High Within A Year on Falling US Interest Rates, Halving, VanEck Says

The Evolution Begins: StrikeX Launches Ultimate Crypto-Crypto Swaps Experience with Swaps V2 Wall...

Join our free newsletter for daily crypto updates!