Coinbase NFT and OpenSea address security concerns in response to Thirdweb's disclosure of a critical vulnerability targeting NFT collections.

Coinbase NFT and OpenSea have moved to reassure users and creators after Web3 development platform Thirdweb disclosed a critical vulnerability affecting a widely used open‑source smart contract library for NFTs. Thirdweb said on December 4, 2023 that it had identified the issue on November 20 in a “commonly used” library integrated into some of its own pre-built contracts, including NFT drop and airdrop contracts using ERC20, ERC721, and ERC1155 standards. The flaw could potentially be exploited in impacted contracts created before November 22, 2023, although Thirdweb reported no evidence that its own contracts had been exploited. Because Thirdweb’s contracts underpin a number of NFT collections and drops, including some hosted via OpenSea and Coinbase NFT, both marketplaces issued statements outlining coordinated responses with Thirdweb. OpenSea said it was in contact with Thirdweb about the vulnerability affecting “some NFT collections” and is preparing to support creators who migrate to new, secure contracts. Coinbase NFT confirmed it was notified on December 1 that some collections deployed through Thirdweb on its platform were affected, but stressed that Coinbase’s core systems and customer funds remain safe. Thirdweb has published mitigation guidance and tools, advising affected contract owners to lock vulnerable contracts, take a snapshot of holders, and migrate to updated contracts, while marketplaces work to limit user impact and maintain trust in NFT infrastructure.

✨ AI-generated background, compiled from web sources — not editorial content.

More coverage

• OpenSea & Coinbase NFT Address Thirdweb's Security Alert With ... (coingape.com)
• Web3 firm Thirdweb discloses major vulnerability in common open ... (siliconangle.com)
• Open-source NFT library flaw reported by Thirdweb | brief - SC Media (scworld.com)
• Multiple NFT collections at risk by flaw in open-source library (bleepingcomputer.com)
• What We Know About The Contract Vulnerability Worrying Web3 (nftnow.com)

Explore the topic

• NFT
• OpenSea
• Coinbase
• vulnerability