SIBLING LABS

Official Tech Partner for Siblings.

Parent Twitter: @NFTSiblings

[SIBLING LABS @SiblingLabs]

We have been looking into the new OpenSea contract exploitation.

Here’s what you need to know and some resources to keep you safe:

🧵 ( 1/8 )

[SIBLING LABS @SiblingLabs]

@Thorrwulf The Approve All function is on the contract that the NFT came from. The front end of websites can call the function and fill in the parameters for you allowing any address they specify to use the transfer function on your behalf. That address could be a contract or a wallet.

[SIBLING LABS @SiblingLabs]

We have been looking into the new OpenSea contract exploitation.

Here’s what you need to know and some resources to keep you safe:

🧵 ( 1/8 )

[SIBLING LABS @SiblingLabs]

In addition, you can also revoke permission on Etherscan directly on the contract. They also have a beta tool similar to Revoke at https://t.co/ozHNtOyMuu. Although in my experience they missed a few collections I had previously approved. (7/8)

[SIBLING LABS @SiblingLabs]

If you are worried about what you've approved you can check and revoke permission on https://t.co/7mrK6jSQu1 created by @RoscoKalis. If the site is down, you can also use https://t.co/TujJMIQDV7 redeployed by @anishagnihotri to compensate for the heavy demand. (6/8)