The newest development in the OpenSea NFT debacle shows us that the NFT marketplace’s mistakes continue to cost its users more and more every day. The victim of this oversight lost their NFT due to advice by OpenSea themselves.
OpenSea Openly Screws Up
NFT trader and artist swolfchan.eth mentioned in a tweet that the most recent community update from Opensea asked its users to cancel all listings of their NFTs. They mentioned that their NFTs could be sold if their older listing was still active.
Thus following the instructions, the user went ahead and canceled the listing and soon after discovered that their 15 ETH ($36.7k) worth of MAYC Bored Ape NFT was sold for just 6 ETH which is a little under $15k.
The incident took place when the cancellation of an older listing of the same NFT for 6 ETH was found by an exploiter who managed to execute the sale before the cancellation transaction could be completed.
As explained by another NFT collector, dingaling on Twitter:
“Well, checking the mempool is much easier than scraping all the Opensea APIs to find old orders, since the cancellation tx submitted has all the order details in the tx input data. You are basically handing out your NFT listing details on a silver platter to be frontrun”
When a pending transaction is in the mempool, exploiters can easily access that info and if they act quickly, they can purchase the NFT off of the market even before the listing is canceled.
He went on to say that OpenSea’s incompetence enabled these exploiters to receive the exact information needed to make the purchase at an older lower price when they asked their users to cancel the listings.
What NOT To Do
Twitter user dingaling further explained that users can prevent a similar situation by canceling their listings the right way.
“Make sure you transfer all the NFTs with “inactive Opensea listings” OUT of your address first before cancelling the live listings in your original address. Only after all the listings are cancelled are you safe to transfer it back.”