Is it secret? Is it safe? ๐ง๐ผโโ๏ธ
Hacks and scams: Kevin Rose lost almost $2M in NFTs
joshyote โ๏ธ๐ฝ
January 26, 2023
gm โ๏ธ
Is it secret? Is it safe?
Unfortunately, another day, another high-profile hack.
We'll take a look at what happened to Kevin Rose and what you should do to keep your NFTs, crypto, and digital assets safe.
But first, how about a little good news?!
gm!
We're beyond excited to announce that we have raised a $60 million Series B funding round led by @10TFund โ with participation from Tiger Global, @sevensevensix, and @QEDInvestors, among others โ to fuel our next phase of growth and development!
— QuickNode (@QuickNode)
Jan 24, 2023
KRO Got Phished
You hate to see it.
Even crypto-native, highly educated people can fall for phishing scams and be victims of hacks. Here's what happened to Kevin Rose, and how you can take precautions to protect yourself.
Stay vigilant!
be super careful when signing anything, even offchain signatures. kevin rose just had ~$2 million worth of NFTs drained from his vault from signing one malicious seaport bundle. thankfully a couple things held back, like the punk zombie (1000 ETH) which can't be traded on OS
— foobar (@0xfoobar)
Jan 25, 2023
It appears Kevin Rose was phished via malicious social engineering that instilled a false sense of security ๐
0/ Earlier this evening @kevinrose was phished into signing a malicious signature that allowed the hacker to transfer a large number of high-value tokens. Here is a breakdown of what happened, our immediate response, and our ongoing effortsโฆ
— Arran (@divergencearran)
Jan 25, 2023
KRO lost some serious grails (including an Autoglyth) ๐ญ
Going to miss this one: (no idea who purchased it)
— KฮVIN RโSE (๐ชน,๐ฆ) (@kevinrose)
Jan 26, 2023
Common Hacks and Scams
The following comes from a Twitter thread from Treasure Seeker
You can get "hacked" if you take any of the actions below:
๐ช Initiate a malicious transaction
๐ Sign a malicious signature
๐ Share your seed phrase or private key
๐ฆ Install malware
Remember that hardware wallets just protect against malware and not the other 3 attacks.
Most hacks are just social engineering attempts to trick you into initiating a txn or signature.
They need you to move fast so that you don't have time to think.
Common tricks involve greed or fear:
๐ surprise mints
๐ค airdrops
๐ป scare tactics (see below)
๐ giveaways
Always check the following before initiating a transaction on an unknown website:
๐ It shouldn't ask for an approval to your NFTs
โ The contract should be verified on Etherscan
๐ฅ The contract should be vetted by experts
Read the whole thread here ๐
๐จ NFT SECURITY 101 ๐จ
NFT hacks are unfortunately quite common today.
Here's an educational thread on the types of hacks and what you can do to avoid them!
1/11 ๐งต๐ฝ
— Treasure Seeker (@treasuresETH)
Jan 24, 2023
READ THIS NOW
Have you been scoping out the icy.tools Learn section?
We have some stellar guides and resources for learning about all things NFTs. New guides are added weekly.
๐ธ How to Join a DAO
Pretty sweet, we know.
we love a good roundtrip ๐
meme credit: @schmrypto
Want to see something else from our newsletter, let us know! dm us on Twitter @icy_tools
And if you want to share this newsletter with a friend, that would be super duper! Just send them this link: