from Hacker News

Opensea exploit in migration contract allowing users to grab any NFT from others

by rburhum on 2/20/22, 1:52 AM with 2 comments

  • by ecoeconomy on 2/20/22, 2:37 AM

    The code is written using a dynamically typed language with no security guarantees so stuff like this is inevitable. Are there projects that leverage static typing to allow the creation of provably secure contracts?
  • by ssss11 on 2/20/22, 2:21 AM

    It was a phishing campaign. People clicked the wrong link and allowed a rogue smart contract to drain their wallets. Open sea has given an update on Twitter.