Ethereum

Bitcoin

Security

Read

<div class="cryptonews">
 <p class="is-style-lead">All <a rel="noopener noreferrer nofollow" title="stolen" href="https://thebittimes.com/tag/stolen.html">stolen</a> Bored Ape Yacht Club (BAYC) and Mutant Ape Yacht Club (MAYC) nonfungible tokens (NFTs) from the NFT Trader platform have been <a rel="noopener noreferrer nofollow" title="recover" href="https://thebittimes.com/tag/recover.html">recover</a>ed following a $267,000 <a rel="noopener noreferrer nofollow" title="bounty" href="https://thebittimes.com/tag/bounty.html">bounty</a> <a rel="noopener noreferrer nofollow" title="payment" href="https://thebittimes.com/tag/payment.html">payment</a>.</p>
 <p>On Dec. 16, a security breach on the peer-to-peer platform NFT Trader led to the theft of NFTs worth nearly $3 million.</p>
 <p>The attacker, in public messages, claimed to have capitalized on an exploit initially used by another user, demanding a ransom for the return of the <a rel="noopener noreferrer nofollow" title="stolen" href="https://thebittimes.com/tag/stolen.html">stolen</a> NFTs. They insisted on a <a rel="noopener noreferrer nofollow" title="payment" href="https://thebittimes.com/tag/payment.html">payment</a> of 120 Ether (ETH), equivalent to around $267,000 at the time, to return the NFTs.</p>
 <p>Responding swiftly, Boring Security, a non-profit web3 security project funded by ApeCoin, spearheaded a community initiative that secured the return of all assets in under 24 hours after complying with the ransom demand.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">All 36 BAYC and 18 MAYC that the exploiter had are now in our possession.<br><br>We sent her 10% of the floor price of the collections as bounty. We will be working with the affected victims getting them back to them free of charge.<br><br>Right after this coffee break…<br><br>Victims please…</p>— Boring Security (@BoringSecDAO) December 17, 2023
   </blockquote>
  </div>
 </figure>
 <p>Boring Security, in a statement on X, confirmed the recovery of all 36 BAYC and 18 MAYC NFTs. The payment to the hacker amounted to 10% of the floor price of the collections, as agreed upon.</p>
 <p>The <a rel="noopener noreferrer nofollow" title="bounty" href="https://thebittimes.com/tag/bounty.html">bounty</a> was paid by Greg Solano, co-founder of Yuga Labs. The company is the creator of both the NFTs collections and supported negotiations to <a rel="noopener noreferrer nofollow" title="recover" href="https://thebittimes.com/tag/recover.html">recover</a> the tokens and return them to their original owners for free.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> VC giant Tiger Global reportedly cut stakes in OpenSea and NFT collection BAYC
 </div>
 <p>The breach was traced back to a vulnerability introduced by a smart contract upgrade 11 days prior. This upgrade enabled the misuse of a multicall feature, leading to unauthorized NFT transfers. The loophole was identified by “Foobar,” a pseudonymous founder and developer of Delegate, who also helped NFT Trader’s team halt the attack.</p>
 <p>Following the incident, calls were made urging users to revoke permissions granted to two old contracts identified as potential security risks. The revoked approvals were essential to prevent possible future thefts of the NFTs.</p>
 <h2 class="wp-block-heading" id="boring-security-urges-regular-training-against-nft-hacks">Boring Security urges regular training against NFT hacks</h2>
 <p>Boring Security, acknowledging the complexity of self-custody in decentralized finance, emphasized the need to understand the mechanisms of web3. They highlighted the strides made by Ethereum developers in enhancing user-friendly interfaces but stressed the importance of being vigilant in managing digital assets.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">As we finish up getting these apes back to their rightful owners, I just want to give a huge shoutout to the team for working overtime this weekend to come together on this. The DAO is comprised of dozens of individuals, and are all here to further the mission of web3 security…</p>— Boring Security (@BoringSecDAO) December 18, 2023
   </blockquote>
  </div>
 </figure>
 <p>With over 80 partnerships in the NFT space, Boring Security has been advocating for a culture of security in web3. Their approach includes free, instructor-led training sessions. They also urged community leaders to adopt various measures to bolster security.</p>
 <p>These measures include creating whitelists for security-educated individuals, integrating security modules into community access requirements, and training moderators in security protocols.</p>
 <p>Additionally, Boring Security proposed incentives like hosting special Proof of Attendance Protocol (POAP) events and offering bonuses for completing security classes or activities to encourage participation in security education.</p>
 <p>The firm called upon community leaders to collaborate in enhancing and safeguarding their communities, inviting them to share insights and seek guidance.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> US agency identified Bitcoin inscriptions as cybersecurity risk
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/nft-trader-recovers-stolen-bored-apes-with-267k-bounty-payment-tbt74057.html">https://thebittimes.com/nft-trader-recovers-stolen-bored-apes-with-267k-bounty-payment-tbt74057.html</a></p>

NFT Trader recovers stolen Bored Apes with $267k bounty payment

Table of Contents

TheBitTimes

Other articles published on Dec 18, 2023

Brad Garlinghouse, Winklevoss Twins, and Brian Armstrong Unite to Back Pro-Crypto Presidential Ca...

Despite gains for Avalanche (AVAX) and Fantom (FTM), Pullix (PLX) remains a crypto presale to watch

Fund Inflows Stopped in Bitcoin for 11 Weeks! Institutional Investors Turned to Altcoins: This Al...

3 Ways Saga Will Enhance the Solana Ecosystem

Crypto Retreat: Bitcoin at $41.6K, Ethereum Holds Ground in Year-End Trends

Metaverse Biometrics: The Key to Secure Virtual Realms

Join our free newsletter for daily crypto updates!