Cryptocurrency News

Close Call For Rarible After Security Vulnerability Discovery

2022.04.14 22:01

Close Call For Rarible After Security Vulnerability Discovery
Close Call For Rarible After Security Vulnerability Discovery

    • Check Point (NASDAQ:CHKP) identified a vulnerability in the Rarible NFT marketplace.
    • The company claims that they spotted issues relating to malicious airdrops as early as October 2021.
    • Criminals could send users a suspicious link to an NFT that executes JavaScript code that once clicked sends a setApprovalForAll request to the user.

One of the research divisions at the cyber security software firm Check Point identified a vulnerability in the Rarible NFT marketplace. This flaw could have led to the firm’s roughly 2 million users losing all their NFTs.

Check Point was founded in Israel in 1993. The company claims that they spotted issues relating to malicious airdrops as early as October 2021.

Documents shared by Check Point Research (CPR) stated that they discovered that cybercriminals could send users a suspicious link to an NFT that executes JavaScript code that once clicked sends a set Approval For All request to the user.

If a user clicks on the link, the user grants full access to all their wallets on Rarible. Check Point stated that they immediately notified Rarible of the problem on April 5. Rarible acknowledged the problem and promptly fixed the flaw.

CPR stated that “If exploited, the vulnerability would have enabled a threat actor to steal a user’s NFTs and cryptocurrency wallets in a single transaction.”

According to CPR “A successful attack would have come from a malicious NFT within Rarible’s marketplace itself, where users are less suspicious and familiar with submitting transactions.”

CPR upped their focus on this type of scam after singer Jay Chou was the victim of a similar attack. They stated that “it gave us the incentive to investigate further.”

CPR urged all users to be extra careful and diligent when they approve any request on NFT platforms. Users were also urged to verify all transactions on Etherscan’s request tracker when they are unsure of things.

Continue reading on CoinQuora

Source

Related Articles

Leave a Reply

Back to top button
bitcoin
Bitcoin (BTC) $ 97,250.06 0.11%
ethereum
Ethereum (ETH) $ 3,353.69 3.23%
tether
Tether (USDT) $ 0.999711 0.02%
xrp
XRP (XRP) $ 2.24 1.60%
bnb
BNB (BNB) $ 663.79 2.50%
solana
Solana (SOL) $ 183.02 5.72%
dogecoin
Dogecoin (DOGE) $ 0.318961 1.64%
usd-coin
USDC (USDC) $ 1.00 0.02%
staked-ether
Lido Staked Ether (STETH) $ 3,344.65 3.36%
cardano
Cardano (ADA) $ 0.899497 4.91%
tron
TRON (TRX) $ 0.245435 1.30%
avalanche-2
Avalanche (AVAX) $ 37.53 5.67%
wrapped-steth
Wrapped stETH (WSTETH) $ 3,972.39 3.40%
chainlink
Chainlink (LINK) $ 22.18 4.36%
the-open-network
Toncoin (TON) $ 5.32 3.46%
sui
Sui (SUI) $ 4.49 1.46%
wrapped-bitcoin
Wrapped Bitcoin (WBTC) $ 97,059.00 0.15%
shiba-inu
Shiba Inu (SHIB) $ 0.000022 3.68%
hyperliquid
Hyperliquid (HYPE) $ 34.76 7.68%
stellar
Stellar (XLM) $ 0.353023 4.73%
polkadot
Polkadot (DOT) $ 6.98 4.29%
hedera-hashgraph
Hedera (HBAR) $ 0.253414 5.38%
weth
WETH (WETH) $ 3,351.32 3.29%
bitcoin-cash
Bitcoin Cash (BCH) $ 453.96 0.36%
leo-token
LEO Token (LEO) $ 9.34 1.47%
uniswap
Uniswap (UNI) $ 13.70 0.73%
litecoin
Litecoin (LTC) $ 100.13 1.38%
pepe
Pepe (PEPE) $ 0.000017 3.85%
wrapped-eeth
Wrapped eETH (WEETH) $ 3,533.69 3.36%
near
NEAR Protocol (NEAR) $ 5.02 6.36%
ethena-usde
Ethena USDe (USDE) $ 1.00 0.14%
bitget-token
Bitget Token (BGB) $ 4.18 4.90%
usds
USDS (USDS) $ 0.995214 0.52%
aptos
Aptos (APT) $ 9.40 7.67%
internet-computer
Internet Computer (ICP) $ 10.07 4.98%
aave
Aave (AAVE) $ 298.16 9.65%
crypto-com-chain
Cronos (CRO) $ 0.156393 3.63%
polygon-ecosystem-token
POL (ex-MATIC) (POL) $ 0.476239 4.34%
ethereum-classic
Ethereum Classic (ETC) $ 26.10 4.63%
mantle
Mantle (MNT) $ 1.16 9.77%
vechain
VeChain (VET) $ 0.045428 4.64%
render-token
Render (RENDER) $ 7.07 5.09%
whitebit
WhiteBIT Coin (WBT) $ 24.26 0.98%
monero
Monero (XMR) $ 187.38 1.48%
mantra-dao
MANTRA (OM) $ 3.61 6.67%
dai
Dai (DAI) $ 1.00 0.11%
bittensor
Bittensor (TAO) $ 454.75 6.77%
fetch-ai
Artificial Superintelligence Alliance (FET) $ 1.26 7.23%
arbitrum
Arbitrum (ARB) $ 0.748672 6.07%
filecoin
Filecoin (FIL) $ 4.91 4.94%