Global Cryptocurrency

market for non-fungible tokens According to reports, OpenSea has fixed a flaw that, if exploited, might have revealed personal information about its anonymous users.The vulnerability, according to cybersecurity company Imperva, might deanonymize OpenSea users &#34;by associating an IP address, a browser session, or an email in specific scenarios,&#34; the company explained in a blog post on March 9.The information obtained and connected to the wallet and its behavior could identify a user&#39;s true identity as the NFT corresponds to a cryptocurrency wallet address, according to Imperva.It is believed that the cross-site search vulnerability was exploited. Imperva asserted that OpenSea had improperly configured a library that resizes webpage elements that load HTML material from outside sources and are frequently used to display advertisements, interactive content, or embedded films.Exploiters might use the information it broadcasts as a &#34;oracle&#34; to focus their efforts when searches provide no results because the webpage would be smaller because OpenSea didn&#39;t impose any restrictions on this library&#39;s communications. According to Imperva, an attacker might send a link to a target via email or SMS that, when clicked, would provide &#34;important information, including the target&#39;s IP address, user agent, device data, and software versions.&#34;After extracting the NFT names of their target using OpenSea&#39;s vulnerability, the attacker would link the appropriate wallet address to identifiable details like the email or phone number that was used to send the original link. Imperva reported that the platform &#34;was no longer at risk of such assaults&#34; after OpenSea &#34;immediately rectified the vulnerability&#34; and appropriately restricted the library&#39;s interactions.Users of the platform are frequently the target of attacks that imitate OpenSea&#39;s features in order to carry out vulnerabilities, such as phishing websites that look like the platform or signature requests that appear to come from OpenSea.Due to a significant phishing attempt that occurred in February 2022 and resulted in the theft of NFTs valued at over $1.7 million from users, OpenSea has come under fire for the security of its platform. It&#39;s unclear how long the most recent patch has been in place or whether any users have been impacted by the vulnerability.

OpenSea Patches Vulnerability that Potentially Exposed users’ Identities

ItsBitcoinWorld

在 2023年3月14日發表的其他文章

Crypto Market Signals Bullish with Recent USDC, SHIB & ETH Rally

How Optimistic Are We About Roll-ups?

Helium Responds To Binance.US Delisting HNT Trading Pairs

𝗪𝗘𝗘𝗞𝗟𝗬 𝗡𝗘𝗪𝗦𝗟𝗘𝗧𝗧𝗘𝗥 l 𝟭𝟬𝟬

Binance To Stop Deposits and Withdrawals in British Pound

Reminder on the 1st WEMIX AMA

訂閱免費電子報，每天收取加密貨幣最新動態！