{"id":12436,"date":"2022-03-29T22:16:40","date_gmt":"2022-03-30T02:16:40","guid":{"rendered":"https:\/\/pley2win.com\/metaverse\/after-fatal-opensea-bug-was-found-again-will-it-pay-a-real-bounty\/"},"modified":"2022-03-29T22:16:40","modified_gmt":"2022-03-30T02:16:40","slug":"after-fatal-opensea-bug-was-found-again-will-it-pay-a-real-bounty","status":"publish","type":"post","link":"https:\/\/pley2win.com\/?p=12436","title":{"rendered":"After Fatal OpenSea Bug Was Found Again, Will It Pay A Real Bounty?"},"content":{"rendered":"
\n<\/p>\n
\n
OpenSea is apparently choosing not to offer a reasonable bug bounty to a blockchain dev, Mr. \u00d8,\u00a0 who found a major flaw in its system. If this is really the case, it could lead to more disastrous outcomes for OpenSea users.<\/p>\nIs OpenSea compromising its own security by being stingy on Bug Bounties? Credit: OpenSea<\/figcaption><\/figure>\n
OpenSea\u2019s reputation within the NFT community continues to take a beating<\/h2>\n
To sum up the situation, Twitter user Mr. \u00d8 (@mr0chill) took to the social media platform to report that they found a \u201cmassive vulnerability\u201d in OpenSea. In fact, the Quantum project\/product lead stated that this bug is at the \u201csame scale or worse than the last one.\u201d To clarify, they are likely referring to the infamous listing exploit that led to the loss of many high-value NFTs.<\/p>\n
Unfortunately for OpenSea users, Mr. \u00d8 notes in another tweet that they have \u201chad DMs from people who want to \u201cbuy\u201d this exploit, offering close to 100x of what Opensea does\u201d.<\/p>\n
Obviously, this is a nightmare scenario. As Mr. \u00d8\u00a0 goes on to explain, \u201cThis illustrates a market for vulnerabilities that would be very difficult for someone more money motivated than myself to not fall into.\u201d<\/p>\n
Simply put, if people are willing to pay far more than OpenSea for bug information, then there will be people selling that information for the highest price. Such a scenario puts OpenSea users at huge risk from hackers and scammers.<\/p>\nOpenSea had a brief back-and-forth with Mr. \u00d8 on Twitter over the matter.<\/figcaption><\/figure>\n
Not the first time that OpenSea has come under fire for a measly Bug Bounty<\/h2>\n
The tweets \u2013 and most of the replies to them \u2013 are basically saying that OpenSea is pinching pennies when it comes to paying bug bounties.<\/p>\n
For those who don\u2019t know, it is commonplace for blockchain and other tech companies to pay bounties. These are rewards for people who find potential issues in products. In addition, it creates an incentive for people to point out flaws rather than exploit them.<\/p>\n
For example, Polygon awarded a $2 million bug bounty back in October 2021. This goes to show how some companies value the services of those who point out these kinds of bugs. After all, millions can be a small price to pay in comparison to potential damages arising from security lapses.<\/p>\nOpenSea\u2019s last major bug led to weeks of anger and frustration from the NFT community due to major financial losses. Credit: @mr0chill on Twitter<\/figcaption><\/figure>\n
Will the grief ever end for the leading NFT marketplace?<\/h2>\n
OpenSea may well be shooting itself in the foot if it is indeed opting not to pay a fair bug bounty. As a matter of fact, OpenSea has faced criticism for this exact issue in the past. Last November, a so-called \u201cwhite-hat hacker\u201d took to Twitter with similar complaints about OpenSea\u2019s treatment of security and bug bounties.<\/p>\n
OpenSea has been facing an endless stream of discontent from NFT traders on Twitter for months now. This is despite it being the biggest NFT marketplace by user count. Whether it\u2019s bugs, delistings, its mysterious verification process for NFT projects, or other scams, barely a day goes by without people voicing their displeasure with the platform on Twitter.<\/p>\n
Whatever the case may be, hopefully, this situation doesn\u2019t lead to a repeat of the last OpenSea issue. To be sure, it would be a lose-lose for both the platform and its users.<\/p>\n
\n\n
Are you tired of missing important NFT drops<\/strong>?<\/p>\n
Just check out our NFT Calendar!<\/p>\n
Receive the biggest NFT news of the day & recommendations in our <\/b>Daily newsletter.\u00a0<\/strong><\/p>\n
\u00a0<\/p>\n\n
All investment\/financial opinions expressed by NFTevening.com are not recommendations.<\/em><\/p>\n
This article is educational material.<\/em><\/p>\n
As always, make your own research prior to making any kind of investment.<\/em><\/p>\n<\/div>\n<\/div>\n
![\"OpenSea\"](\"https:\/\/nftevening.com\/wp-content\/uploads\/2022\/03\/76edde93ea6402d5818fbc03767aeda0.jpg\")
![\"Twitter](\"https:\/\/nftevening.com\/wp-content\/uploads\/2022\/03\/Screenshot-2022-03-29-190623.jpg\")
![\"Tweet](\"https:\/\/nftevening.com\/wp-content\/uploads\/2022\/03\/Screenshot-2022-03-29-190643.jpg\")