Kevin Rose is the founder of Nonbank Tokens (NFT) and Moonbirds. He has become the victim of a phishing attack scam, resulting in the theft of his NFT worth more than 1.1 million dollars.

On January 25, the founder of NFT and PROOF shared the news with his 1.6 million Twitter fans, asking them to prevent all Squiggles NFT purchases until his team succeeded in marking it as stolen.

About two hours later, she shared in an independent tweet: "Thank you for your kind and applicable words. A full report is coming soon.".

According to statistics, Rose's NFT was consumed after the malicious signature that allowed a large part of its NFT assets to be transferred to exploiters.

An independent analysis by Arkham found that the attacker extracted at least one Autoglyph with a minimum price of 345 ETH; 25 art blocks (also known as Chromie Sggles) with a minimum use value of 332.5 ETH; And 9 OnChainMonkey objects, with a minimum use value of 7.2 Ethereum.

A total of 684.7 ETH (US $1.1 million) was withdrawn.

How Aaron Ross was used

Although some separate analysis on the chain has already been shared, Arran Schlossberg, senior vice president of PROOF, the enterprise behind Moonbird, explained to his 9500 Twitter fans that Ross "was deceived into signing a malicious signature", which also enabled attackers to migrate many tokens:

Data encryption analyst "foobar" further described the "innovation of network hackers" in an independent article on January 25, explaining that Rose had approved an OpenSea sales market contract, and that Rose could move all its NFT as long as it signed the deal.

He added that Rose was always "a malicious signature" to avoid system vulnerabilities:

The data encryption analyst said that Rose should "store" his NFT assets in a separate wallet:

"Before the sale in the NFT sales market, transferring assets from your vault to an independent 'sell' wallet will avoid this situation."

Another chain analyst "Quit" told its 71400 Twitter fans that the malicious signature was enabled through the Seaport marketplace contract, which brought the driving force to OpenSea:

Quit explained that an attacker could set up an Internet fraud website to query the NFT assets in Rose's wallet.

Subsequently, the attacker created an instruction to transfer all the assets approved by Rose on OpenSea to himself.

Rose went on to prove the malicious business, while paying attention to Quit

In addition, foobar stressed that most of the stolen assets are far more than the minimum price, which means that the amount of stolen assets is likely to reach $2 million.

Quit urges OpenSea customers to "escape" any other websites that promote customers to sign abnormal documents.

Move the NFT inside

Zach XBT, an analyst on the chain, shared a trading terrain map with his 350300 Twitter fans, indicating that the attacker sent assets to FixedFloat, which is also the cryptocurrency exchange in BTC's second-tier lightning network.

Subsequently, the attacker changed the funds into BTC (BTC) and deposited the BTC into the BTC switching valve:

Degendraland, a member of the data encryption Twitter team, told his 67000 Twitter fans that it was the "saddest thing" they had seen so far in the digital currency industry, and added that when someone could go home from such a deadly exploitation, "it was him":

In addition, Ryan Sean Adams, the founder of non-financial institutions, was annoyed that Ross could be used casually. In a tweet on January 25, Russell urged the front-end developers to take out mobile games to improve the user experience (UX), so as to avoid such scams.