<div class="cryptonews">
 <p class="is-style-lead">NFT Trader is suspected to have been <a rel="noopener noreferrer nofollow" title="breached" href="https://thebittimes.com/tag/breached.html">breached</a> after several blue-chip non-fungible tokens (NFTs) were wrongfully transferred.</p>
 <p class="is-style-default">According to an X post by Chinese crypto news reporter Colin Wu, the NFTs were transferred to the address 0x909F2159780e64143CF08f32dBBF56Ed19478fda.&nbsp;</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">RED ALERT<br><br>If you've ever used NFT Trader in the past, revoke approval to their contract ASAP (0x13d8faF4A690f5AE52E2D2C52938d1167057B9af)<br><br>So far already 37 BAYC and 13 MAYC have already been drained to this address https://t.co/KBdpkb8woX</p>— dingaling (@dingalingts) December 16, 2023
   </blockquote>
  </div>
 </figure>
 <p>Wu gave an update about the address holder’s on-chain message, denying they hacked the P2P trading platform, and claiming they rescued the NFTs to return them.</p>
 <p>The holder, who identified themselves as a female “scavenger,” revealed the real hacker’s address as 0x3dc115307c7b79e9ff0afe4c1a0796c22e366a47b47ed2d82194bcd59bb4bd46</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">0x90…8fda sent a message on the chain to deny that he was a hacker. He said that he had rescued these NFT assets and would return them, but required the original holders to pay him a 10% bounty; and the real hacker was 0x3dc. ..bd46. https://t.co/3cXW7ibmcA</p>— Wu Blockchain (@WuBlockchain) December 16, 2023
   </blockquote>
  </div>
 </figure>
 <p>NFT Trader also announced it has suffered an attack on old smart contracts on X (formerly Twitter), asking <a rel="noopener noreferrer nofollow" title="users" href="https://thebittimes.com/tag/users.html">users</a> to remove delegations via Revoke.cash to the following addresses:</p>
 <ul>
  <li>0xc310e760778ecbca4c65b6c559874757a4c4ece0</li>
  <li>0x13d8faF4A690f5AE52E2D2C52938d1167057B9af</li>
 </ul>
 <p>The P2P trading <a rel="noopener noreferrer nofollow" title="platform" href="https://thebittimes.com/tag/platform.html">platform</a> is fairly unknown by most NFT traders. its website shows its CEO is John Pak, working together with co-founders Mattia Migliore and an individual who goes by the pseudonym “Bruckzr.”&nbsp;</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">We've suffered an attack on old smart contracts, please remove the delegation using https://t.co/zEMgkS96nP to the following addresses:<br>-0xc310e760778ecbca4c65b6c559874757a4c4ece0<br>-0x13d8faF4A690f5AE52E2D2C52938d1167057B9af</p>— NFT Trader (@NftTrader) December 16, 2023
   </blockquote>
  </div>
 </figure>
 <p>On X, an NFT collector (@dingalingts) urged traders to “revoke approval to their contract ASAP” if they’ve used NFT Trader before. They identified all the stolen digital assets, which amounted to more than $2 million, including 37 BAYC, 13 MAYC, 4 World of Women, and 6 VeeFriends.&nbsp;</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> US court sides with Yuga Labs, agrees RC BAYC are copycats
 </div>
 <figure class="wp-block-image"><img decoding="async" src="https://thebittimes.com/image/getimage/?url=https://lh7-us.googleusercontent.com/LQcLTsbTi9uallr5qGUIb7t5pwyvyGVbKftAjyarud1CvfoMB14LHRzrzgRyvEDpEiQr-zU3ERx8FgXiCPluVL33a69WQ1Undi0Df1vt3EsC3IqQwYE8a-q8FOOatOMCo1ii0oCyCk5RrgCo7okbSss" alt="P2P platform NFT Trader breached, asks users to revoke approval - 1">
 </figure>
 <p>For the hacker to return the NFTs, they sent some demands through their on-chain message, insisting owners need to pay them a bounty because “it is what they deserve,” asking for 10% of the NFTs’ values for their “work.”</p>
 <figure class="wp-block-image"><img decoding="async" src="https://thebittimes.com/image/getimage/?url=https://lh7-us.googleusercontent.com/BEqh8DE1CGBMPecm1OGFLZI2vOFWfWLpytlVfcUgYq3aLvP2tf8Otcj5tNmfmRGWgZuaAMcBebyTmfuk5LMda87lzyh_Z46VSc5Aah5b1-WBF2tsVKRmcSCFr3JOF1UV6qp03zbCnO9EoYJu-1DnhxA" alt="P2P platform NFT Trader breached, asks users to revoke approval - 2">
 </figure>
 <h2 class="wp-block-heading" id="strong-don-t-blindly-send-eth-strong"><strong>Don’t ‘blindly send ETH</strong>‘</h2>
 <p>The crypto community is skeptical about the demands. Market analysts like ZachXBT are warning traders not to “blindly send their ETH.”</p>
 <p>ZachXBT exchanged some words with the exploiter, questioning the integrity of their word to return the assets.</p>
 <p>The analyst reckoned that if they were up to giving back the stolen assets, they should consider listing the Apes to the original wallet address or using a middleman for the process.&nbsp;</p>
 <div class="wp-block-group is-layout-constrained wp-block-group-is-layout-constrained">
  <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
   <div class="wp-block-embed__wrapper">
    <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
     <p lang="en" dir="ltr">Amazing things are happening for the monkey nft people<br><br>NFT Trader exploiter and ZachXBT exchange words pic.twitter.com/FAL0GgnvAt</p>— davis (@basedkarbon) December 16, 2023
    </blockquote>
   </div>
  </figure>
  <p>Esports platform Kungama founder Michael Padilla, famously known as TFG, was among the victims of the NFT Trade exploit.</p>
  <p>TFG took to X to announce he has lost two of his most valued BAYC NFTs, revealing he used NFT trade about 1 and a half years ago and didn’t think he was at risk because he “removed it as a connected site.”</p>
  <p>TFG acknowledged he didn’t take the necessary steps to shield his assets from the exploit, including revoking permissions on Etherscan.</p>
  <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
   <div class="wp-block-embed__wrapper">
    <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
     <p lang="en" dir="ltr">Just got drained for my two favorite NFTs @BoredApeYC <br><br>Was drained cause I used NFTtrader as a trading <a rel="noopener noreferrer nofollow" title="platform" href="https://thebittimes.com/tag/platform.html">platform</a> 1.5 years ago.<br><br>I assumed I wasn’t at risk because I removed it as a connected site, but that isn’t the full steps. Needed to <a rel="noopener noreferrer nofollow" title="revoke" href="https://thebittimes.com/tag/revoke.html">revoke</a> on etherscan<br><br>GG pic.twitter.com/6MbK7Kwgp3</p>— TFG (@TFGmykL) December 16, 2023
    </blockquote>
   </div>
  </figure>
  <p>According to Eden Block VC founder, who goes by the handle Lior.Eth on X, this is not the first time NFT Trader has been hacked, although there haven’t been any other incidents reported by the platform prior to today’s hack.&nbsp;&nbsp;</p>
  <p>An X user dubbed bytes032.xyz, who describes themselves as a white glove smart contract security service provider, described the hack as “peak degeneracy.”</p>
  <p>They shared a javascript report of NFTTrader’s exploited smart contract, which showcased how everyone was helpless in pausing the contract because the platform’s team didn’t expose the _pause function with public visibility.</p>
  <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
   <div class="wp-block-embed__wrapper">
    <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
     <p lang="en" dir="ltr">– NFTTrader getting hacked<br>– contract is pausable so they can pause if getting hacked<br>– team cannot pause the contract because they forgot to expose the _pause function with a public visibility<br><br>this is peak degeneracy pic.twitter.com/Q2SvTXcSEJ</p>— @bytes032.xyz (@bytes032) December 16, 2023
    </blockquote>
   </div>
  </figure>
  <p>The _pause function is used in a smart contract to halt all activity if something goes wrong. If the _pause function is not public, then only the original creator can stop the contract and prevent further loss of funds.</p>
  <p>However, if the original creator is unaware of the problem or not available at the time, the hacker could potentially drain all the funds before anyone can stop them.</p>
 </div>
 <p>Nonetheless, there could be a light among the dark clouds seen by the victims of the NFT Trader hack, as BAYC’s founder Greg Solano has offered to pay 10% of the bounty the exploiter has asked for to see the NFTs have been returned to their rightful owners.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">And if the info below is real, I will gladly put up the ETH to see these 50 apes back to their rightful owners. https://t.co/7jBwQHQRCj</p>— Garga.eth (Greg Solano) (@CryptoGarga) December 16, 2023
   </blockquote>
  </div>
 </figure>
 <h2 class="wp-block-heading" id="strong-hacker-returns-one-nft-without-bounty-strong"><strong>Hacker returns one NFT without bounty</strong></h2>
 <p>In a remarkable twist, the exploiter has willingly given back a World of Women (WOW) NFT without charge, per Etherscan data. After returning the stolen WOW NFT, the hacker also returned a BAYC and a VFT to its rightful owners, without any further demand for payment.&nbsp;</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Two more apes sent home to from the @NftTrader exploiter. pic.twitter.com/M5GdhEoHUl</p>— Xeer (@Xeer) December 16, 2023
   </blockquote>
  </div>
 </figure>
 <p>This unexpected twist has added a sense of unpredictability to the ongoing saga, leaving the community both astonished and uncertain about the hacker’s motives.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> BAYC NFT floor price drops 90% from $600,000 in 18 months
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/p2p-platform-nft-trader-breached-asks-users-to-revoke-approval-tbt73914.html">https://thebittimes.com/p2p-platform-nft-trader-breached-asks-users-to-revoke-approval-tbt73914.html</a></p>

P2P platform NFT Trader breached, asks users to revoke approval

목차

TheBitTimes

2023년 12월 16일에 게재된 다른 기사

Coinbase Responds To SEC Denial Of Regulations Request – Details

Kazakhstan’s Digital Tenge Trial Success Spurs Upgrades in 2024

Analis Temukan Pola Bullish Langka di Harga XRP, Siap Melesat Lagi?

OpenAI CEO Reinforces Worldcoin’s Vision Amidst Funding Pursuit

Coti plans transition to Ethereum layer-2 network in 2024

Five Altcoins to Watch: ADA, DOT, ALGO, STX & FIL Show Promising Signals

무료 뉴스레터에 가입하여 매일 최신 암호화폐 소식을 받아보세요!