OpenSea NFT heist: Attackers make off with millions of digital assets

By Michael Grothaus

February 21, 2022

Some users of Opensea, one of the most prominent and popular NFT marketplaces, were shocked to see some of their NFTs had been stolen over the weekend. As The Verge reported, the heist seems to have occurred on Saturday between 5 p.m. and 8 p.m. ET. During that time 254 tokens were stolen.

So how did the attackers carry out the heist? OpenSea has been adamant that the site was not hacked, with OpenSea CEO Devin Finzer saying on Twitter that the website, its listing systems, or any banners it hosted were not a vector for the attack. Right now the most popular theory is that the 254 tokens were stolen in a phishing attack, though that is not confirmed.

However, in a series of tweets, OpenSea has confirmed two things about the attack:

    The platform says 17 individuals were impacted by the attack—not 32, which was originally reported.

    The attack no longer appears to be active.

So what was the value of the NFTs that got lifted in the heist? Original reports had their value pegged as high as $200 million, but in a tweet, Finzer says the value is only $1.7 million. That figure is based on the amount of the Ether cryptocurrency the attacker currently has in his digital wallet. Finzer says the amount was gained “from selling some of the stolen NFTs.”

We’ve reached out to OpenSea for comment and will update this post if we hear back.