Hack history / 2022 / Hack or exploit
OpenSea
Hack or exploit on Jan 25, 2022 · Withdrawal Logic Flaw
IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 3 SOURCES
Lost
$1M
sources: $1M to $1.8M
Returned
none listed
as the sources state it
Rank
#942
among thefts by dollars lost
What happened
OpenSea's listing system contained a bug where transferred NFTs remained listed on the marketplace via the API despite appearing delisted. Attackers exploited this to purchase previously thought-delisted NFTs at old, far below-market prices and immediately resold them for profit. Three attackers collectively extracted over $1M by buying popular NFTs like Bored Ape Yacht Club at historical listing prices.
In review: sources disagree on the loss.
Details
- Date
- Jan 25, 2022
- Kind
- Hack or exploit
- Method
- Withdrawal Logic Flaw
- How in
- Smart contract bug
- Target
- NFTfi
- Chains
- Ethereum
Related incidents
NFT phisher charged over OpenSea lookalike scam 2023 · Scam · $449K
OpenSea 2023 · Hack or exploit · undisclosed
Opensea 2022 · Hack or exploit · undisclosed
OpenSea's stale listing issue burns another collector 2022 · Hack or exploit · $20K
OpenSea 2022 · Hack or exploit · $20K
OpenSea 2023 · Hack or exploit · undisclosed
Opensea 2022 · Hack or exploit · undisclosed
OpenSea's stale listing issue burns another collector 2022 · Hack or exploit · $20K
OpenSea 2022 · Hack or exploit · $20K
Cite this page
SwanBluechip, "OpenSea hack, Jan 25, 2022: $1M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htb5ffbf347c/ (data as of 2026-10-31).