Source: blockchain.news
A wallet security team has made a real-time dashboard available on the OpenSea marketplace. This dashboard gives community members the ability to identify, track, and monitor potential breaches using non-fungible tokens (NFTs) using offline signatures.
The company behind the ZenGo cryptocurrency wallet claims that it has developed NFT hack detection using a simple approach. This involves keeping track of NFT transactions made on the NFT marketplace and comparing the amount of each transaction to the minimum NFT collection price. It will be detected as a potential hack if the ratio between the two trade values is unusually low.
For starters, this form of hack has no standard method for revealing the meaning of the messages that users are required to sign. This indicates that people need to “blindly believe” the message and “blindly sign” it to proceed. In addition, Be’ery noted that these types of attacks affect the platforms’ contracts and suggested that the platforms share some responsibility in situations like these.
When a wallet executive was asked about possible responses to this issue within the community, he responded by stating that there is currently no satisfactory answer. His explanation was as follows: “Users may use certain proprietary browser extensions that allow some access to some offline signatures. However, these extensions do not cover all offline signatures and must be updated each time a new signature is introduced.” offline signature type.”
According to the ZenGo team, they have also started working with the Ethereum Foundation, as well as a variety of decentralized applications and other wallets, to support a draft Ethereum Improvement Proposal (EIP) that, if adopted, will fix the issue. According to Be’ery, “EIP allows a contract to describe the exact meaning of the offline signature, so that the wallet app can display it to the user. The user can make an informed decision about whether or not to sign the signature.” offline, and they don’t need to sign blindly.” This is possible thanks to the EIP.
At OpenSea, other organizations and individuals in the community have also issued similar advisory statements about off-gas transactions. The Harpie Anti-Theft Project issued a community warning on December 23 about private auction fraud affecting users of the NFT marketplace. On top of that, fraud involves validating signatures without thinking.
Read More at blockchain.news