NFT holders panic as wallets are drained; some blame smart contract from OpenSea

It was a phishing campaign. People clicked the wrong link and allowed a rogue smart contract to drain their wallets. Open sea has given an update on Twitter.

"The hacker is using a helper contract deployed 30 days ago, to call an OS contract deployed 4 years ago, with valid atomicMatch() data.

"Likely a signature phishing attack from several weeks back, the attacker is exploiting now before … these listing phishings will expire in six days, so the hacker is acting now to steal items listed on the V1 marketplace.

"This is not a generalized smart contract exploit, rather a latent phishing attack."

https://twitter.com/0xfoobar/status/1495208279210876930