SIBLING LABS

We have been looking into the new OpenSea contract exploitation. Here’s what you need to know and some resources to keep you safe: 🧵 ( 1/8 )

@Thorrwulf The Approve All function is on the contract that the NFT came from. The front end of websites can call the function and fill in the parameters for you allowing any address they specify to use the transfer function on your behalf. That address could be a contract or a wallet.

@SiblingLabs What is the address of the smart contract that requires the approval?

We have been looking into the new OpenSea contract exploitation. Here’s what you need to know and some resources to keep you safe: 🧵 ( 1/8 )

In addition, you can also revoke permission on Etherscan directly on the contract. They also have a beta tool similar to Revoke at etherscan.io/tokenapprovalc…. Although in my experience they missed a few collections I had previously approved. (7/8)

If you are worried about what you've approved you can check and revoke permission on revoke.cash created by @RoscoKalis. If the site is down, you can also use revokefork.com redeployed by @anishagnihotri to compensate for the heavy demand. (6/8)