A user has lost their non-fungible tokens (NFTs), worth hundreds of thousands of dollars, in a phishing scam on the Blur marketplace.
The loss, reported by 0xQuit on X (formerly Twitter), included six Bored Ape Yacht Club NFTs, 40 Beanz, and three Elementals. They were all listed at one wei each, which is almost nothing.
Based on current prices, the total value is about $239,676. Wei is the smallest unit of ether on the Ethereum blockchain.
The scam was done by an unknown person who used a loophole in Blur’s listing system to make private sales, according to 0xQuit, a Solidity developer and auditor.
Normally, Blur does not allow private listings, but the scammer changed the royalty settings of the NFTs to bypass this rule.
Usually, if a scammer tricks someone into listing an NFT for almost nothing, automated bots buy it quickly by paying higher fees, leaving the scammer with nothing.
To avoid this, scammers are now tricking people into listing NFTs at high prices, with all the money going to the scammer’s address, 0xQuit explained.
Scammers do this by setting a rule that cancels any transaction if someone else tries to buy it, making the sale private.