A bug in OpenSea, the world’s most popular NFT marketplace, is allowing hackers to buy rare NFTs for far the collection’s floor price.

⠀

The bug has been present for weeks, but over the past few days, a surge of collectors has revealed on Twitter that their NFTs have sold for prices they were allegedly no longer listed for on OpenSea. 

⠀

One of the NFTs, Bored Ape #9991, was purchased using the exploit technique for 0.77 ETH ($1,760) this morning and quickly resold for 84.2 ETH ($192,400), netting the hacker a profit of over $190,000. The Ethereum address linked to the reseller has received more than 400 ETH ($904,000) in payouts in the past 12 hours.

⠀

The owner of the Bored Ape, TBALLER.eth, quickly noticed the sale and tweeted that they had not listed their NFT in the first place.

⠀

Hugo Morosini, Tech Lead at Ledger, has explained how all this was possible perfectly in a Twitter thread.

Hugo Morosini @TheRealMorrow

Big fuss ongoing about @opensea, apparently someone found a way to exploit a flaw in the UX to use sell orders that were "forgotten" by OpenSea itself. Want to see if your NFTs are threatened or simply learn some stuff about OpenSea's internals ? Here's a fat thread 🧵⬇️

January 24th 2022

42 Retweets72 Likes

⠀

For more from us at Waivly, join our free fun-to-read and to-the-point newsletter enjoyed by hundreds of people across the internet every day of the week 👇