Is it secret? Is it safe? 🧙🏼‍♂️

Hacks and scams: Kevin Rose lost almost $2M in NFTs

joshyote ✌️👽
January 26, 2023

gm ✌️

Is it secret? Is it safe?

Unfortunately, another day, another high-profile hack.

We'll take a look at what happened to Kevin Rose and what you should do to keep your NFTs, crypto, and digital assets safe.

But first, how about a little good news?!

gm!
We're beyond excited to announce that we have raised a $60 million Series B funding round led by @10TFund — with participation from Tiger Global, @sevensevensix, and @QEDInvestors, among others — to fuel our next phase of growth and development!
— QuickNode (@QuickNode)
Jan 24, 2023

Read the QuickNode Series B Announcement here!

KRO Got Phished

You hate to see it.

Even crypto-native, highly educated people can fall for phishing scams and be victims of hacks. Here's what happened to Kevin Rose, and how you can take precautions to protect yourself.

Stay vigilant!

be super careful when signing anything, even offchain signatures. kevin rose just had ~$2 million worth of NFTs drained from his vault from signing one malicious seaport bundle. thankfully a couple things held back, like the punk zombie (1000 ETH) which can't be traded on OS
— foobar (@0xfoobar)
Jan 25, 2023

It appears Kevin Rose was phished via malicious social engineering that instilled a false sense of security 😞

0/ Earlier this evening @kevinrose was phished into signing a malicious signature that allowed the hacker to transfer a large number of high-value tokens. Here is a breakdown of what happened, our immediate response, and our ongoing efforts…
— Arran (@divergencearran)
Jan 25, 2023

KRO lost some serious grails (including an Autoglyth) 😭

Going to miss this one: (no idea who purchased it)
— KΞVIN R◎SE (🪹,🦉) (@kevinrose)
Jan 26, 2023

Common Hacks and Scams

The following comes from a Twitter thread from Treasure Seeker

You can get "hacked" if you take any of the actions below:

🪙 Initiate a malicious transaction

📝 Sign a malicious signature

🔑 Share your seed phrase or private key

🦠 Install malware

Remember that hardware wallets just protect against malware and not the other 3 attacks.

Most hacks are just social engineering attempts to trick you into initiating a txn or signature.

They need you to move fast so that you don't have time to think.

Common tricks involve greed or fear:

🆓 surprise mints

🤑 airdrops

👻 scare tactics (see below)

🎁 giveaways

Always check the following before initiating a transaction on an unknown website:

🔐 It shouldn't ask for an approval to your NFTs

✅ The contract should be verified on Etherscan

👥 The contract should be vetted by experts

Read the whole thread here 👇

🚨 NFT SECURITY 101 🚨
NFT hacks are unfortunately quite common today.
Here's an educational thread on the types of hacks and what you can do to avoid them!
1/11 🧵🔽
— Treasure Seeker (@treasuresETH)
Jan 24, 2023