Exploatarea pieței duce la pierderi catastrofale pentru colectorii NFT

O problemă API pe piețele populare NFT OpenSea și Rarible a condus la colecționarii NFT să sufere pierderi masive pentru prețuiții lor Bored Apes și Cool Cats.

The error was caused by NFT collectors incorrectly cancelling their listings on Opensea by opting to transfer their assets to another wallet in an attempt to avoid paying cancellation fees, which can fetch up to $100 based on gas prices.

This method was assumed to have ‘cancelled’ the listing as it no longer showed as ‘listed’ on the front end of OpenSea’s user interface.However, the listings were still accessible as older ‘listings’ on alternativă piaţă Raribil, which uses data from the Opensea API to list and display NFT-uri de vânzare.

Over time, collectors began transferring their NFTs back to the original wallet. Now, unbeknownst to them, their prized assets were again purchasable for unbelievably low prices as the listings were still ‘valid’ on Rarible.

As collectors began to transfer their NFT-uri back to the original wallet, the listings remained ‘open’ on Rarible as the blockchain still recognised that the NFT was listed at the original listing price.

However, collectors still began losing their prized assets for unbelievably low prices as the OpenSea front end showed that the listings had been cancelled and were no longer available, meaning that they remained oblivious that their prized assets were still purchasable, leading to catastrophic losses for a select few.

The exploit started early this morning with a number of below-market-value purchases from Opensea user ‘jpegdegenlove' pentru three Bored Apes, two Mutant Apes, A Pisica tare și Genesis CyberKongz NFT.

It’s now believed that the exploiter interacted directly with smart contracts to ‘bypass’ the OpenSea interface and discover the listings that were still available for purchase ‘on-chain’ – thus making them purchasable without the holders being aware.

The person behind the exploit, ‘jpegdegenlove’, has managed to gain around 332 ETH ($737k) following the exploit

Following the low-ball purchases, the NFT-uri were then relisted at their perceived market value and instantly snapped by other collectors seeking the rarest assets available on the market.

Collectors are now being urged to cancel their older listings on Rarible to ensure that their assets are safe from the exploit. In addition, some prominent members of the Ape plictisit community are planning on opening a fund to help recuperate the losses incurred by the unfortunate BAYC holders affected.

Raribil did move swiftly to encourage users to cancel their older listings when the exploit was first discovered by cancelling all OpenSea orders on its platform and informing users on how to properly cancel their listings.

Today’s exploit now provides the first stark reminder of the potential ramifications of the exploit and the costly mistakes that can be made in the unpredictable NFT space.

Source: https://coinrivet.com/marketplace-exploit-leads-to-catastrophic-losses-for-nft-collectors/