Leading non-fungible token (NFT) development studio Yuga Labs has tweeted out a warning that a group of attackers are preying on the NFT community.
The team stated that their security team has been tracking a threat group that persistently targets the community — which they believe to be readying a coordinated attack on multiple communities.
While Yuga Labs have yet to respond to questions requesting for more information in greater detail, the warning arrived after a few months of million dollars worth of NFT exploits.
In the past weekend, more than $375,000 worth of ETH and 314 NFTs were stolen from the Premint NFT platform. Security firm CertiK have discovered that the attackers planted a malicious JavaScript script on the Premint website. The code instructed users to “set approval for all” when asked to connect their wallets to the site, which gives the attackers an access to all of the assets stored in the user’s wallets.
According to a statement from CertiK, the malicious script is no longer available as the Domain Name Server ceased to exist. However, that does not mean that the effects of the attack wore off as they still remain on-chain.
CertiK added that the threat group took advantage of the “centralisation issues and single-points of failure” — which is typical for crypto projects that depend on centralised internet infrastructures. “There has been a marked increase in attackers targeting other official accounts such as social media platforms to conduct exploits,” said CertiK.
A week prior to the Premint incident, a threat group attacked Omni Protocol — an NFT platform where users can take loans against their NFTs — and made off with over $1.4 million worth of ETH.
In May, the users of NFT marketplace OpenSea received fake promotional messages via the project’s Discord channel. Users that fell for it would be led to a fake website and have their wallets be drained after clicking on the link.
