The other evening, OpenSea, widely considered the world's most well-known NFT marketplace, dropped an NFT shocking blog article. According to their account, they use Customer.io as an email vendor.
The issue? One of the employees ``misused their employee access to download & share email addresses [of OpenSea's user base] with an unauthorised third party."
More News: Latest NFT News
In the end, the magnitude of this security incident appears to be massive. A significant portion of the company's active user base, which is more than 1.5 million and those who signed up for the company's newsletter, could be affected by having their email addresses compromised.
"If you have shared your email with OpenSea in the past, you should assume you were impacted," the company claimed.
On Twitter, A number of OpenSea users have already complained about an increase in spam email, phone texts, and calls.
Do you have to be concerned regarding security breaches like the OpenSea breach?
The infamous Phishing attack is the most frequent type of hacking and theft within the NFT sector. Since 2021 hackers have successfully robbed millions of dollars of NFTs through malicious links throughout the entire spectrum: OpenSea included.
With the plethora of email addresses of OpenSea users being exposed, malicious actors can easily take on the identity of OpenSea and its staff, convincing users to click on hyperlinks that could see their NFT accounts and collections empty within a matter of minutes.
The NFT company has advised its customers in a discussion on Twitter about what might be in their email inboxes over the next few weeks.
OpenSea provided users with an email asking whether their addresses were part of those sold to the third party involved in the breach. Some users quickly draw attention to the irony of the whole thing.
With OpenSea still recuperating from the widely-publicized incident involving insider trading carried out through one of their former staff members, the breach of data has brought yet another setback for the NFT marketplace's image in the public eye.
Customer.io's investigation is ongoing, and there is no word on the company's future, whether they'll keep or end their relationship with the email provider.
How do you ensure your safety?
You probably don't want to change your email due to this security breach. That's completely acceptable. Here's what you must take to ensure yourself secure:
Check at emails coming from OpenSea and verify that the address is accurate: OpenSea will only send you emails via the domain "opensea.io."
Do not download any files from OpenSea email: OpenSea emails will never contain attachments. Never.
Examine the URL of any webpage that is linked to by the OpenSea email Hyperlinks should always refer to "email.opensea.io" URLs. Double-check that you are sure that "opensea.io" is spelt correctly.
Don't share or verify any passwords or secret phrases for your wallet. Do not share your passwords with OpenSea or any other company. Ever.
Don't sign up for a wallet transaction that comes by email: OpenSea emails will never contain links that ask the user to make a transaction in your wallet.
Never make a transaction in a wallet which doesn't provide the correct source; it should mention " https://opensea.io" if you were referred there via email.
Comments
Post a Comment