A flaw in OpenSea's marketplace let users buy certain NFTs at prices which they had been listed for in the past, without the owner realizing they were still on sale.
A bug in the largest NFT marketplace, OpenSea, allowed attackers to purchase at least $1 million worth of NFTs across multiple different wallets for significantly below market price, blockchain analytics firm Elliptic said on Monday, January 24.
“Those old listings are now being used to buy NFTs at prices specified in the past – often well below current market prices.” Around 20 minutes after Bored Ape #9991 was bought for 0.77 ether, it was sold on for 84.2 ether , according to blockchain records seen on OpenSea, giving the buyer a profit of more than $187,000.
One person paid a total of $133,000 for seven NFTs by exploiting the bug, before then quickly selling them on for $934,000, Robinson said.