Live data from Hacker News

OpenSea administrators can take any tokens minted on OpenSea Shared Storefront

blog.phor.net

31–40 of 54 posts

Re: OpenSea administrators can take any tokens minted on OpenSea Shared Storefront

#31
post #15

Earlier quoted context omitted.

Who hasn't been hurt if you invested in NFTs in the past year.

adults made adult decisions most lost money, some did not i don’t see anyone complaining about the millions of people losing their paychecks to state lotteries and i think that’s cool, they are adults. decisions have consequences. so to op, grow up and take responsibility for your actions.

Does this also apply to some of the founders like Do Kwon or do they get an exception because they're rich?

Re: OpenSea administrators can take any tokens minted on OpenSea Shared Storefront

#32
post #29
post #21

Earlier quoted context omitted.

Because it is accurate

I agree but it's noise and has nothing to do with the topic. Why do you want to encourage that instead of actually discussing the article? I was glad to see it flagged and dead after my comment, but then someone even vouched for it. Like it's such an important comment that it needs to be heard. Even the premise is questionable (does quality presuppose it is moral?) but it's obvious what the parent means and commentin…

The article is about the low-quality implementation of platforms selling NFTs. I don't see how discussing the lack of quality of NFTs themselves, the "product" they sell, falls too far off the tree.

Re: OpenSea administrators can take any tokens minted on OpenSea Shared Storefront

#34

This is a bad title on the HN submission. I suspect the title is intentionally designed to capture people's attention and mislead them. The article title is much better: Does OpenSea Shared Storefront have a backdoor? The submission title does not specify who can take anybody's tokens. Anyone who reads the article can see that the author claims that Open Sea administrators can seize anybody's tokens, and questions wh…

I'm not sure if it's intentional, but the title is written in such as way that it is very easy to misparse as something like "Backdoor in OpenSea allows anybody to take tokens..." That actually is how I first read it. Not saying that doesn't make this a bad thing, but the HN title should really be reverted to the article title.

This title rewrite is really bad. One interpretation of it is basically slandering opensea. I suspect OP (the person who decided to make up a title instead of using the article title) is not a native English speaker, and there are two ways to interpret their title and intentions:

1. they meant it as a question "does backdoor in opensea allow to take anyone's tokens?".

2. they meant it as a statement "backdoor in opensea allows you to take anyone's tokens"

Obviously #2 is a lot worse. Hopefully they just forgot the question mark and weren't intentionally being malicious.

Re: OpenSea administrators can take any tokens minted on OpenSea Shared Storefront

#35

Earlier quoted context omitted.

What makes a 'high quality' NFT, in your opinion or experience?

i assume the implication is that successful/desirable nfts also tend to have a well-thought-out implementation, the union of which being hqnft

perhaps, but isn't the desirability of something due to its (high) quality? how can its quality be measured from its desirability?

seems the wrong way around

Re: OpenSea administrators can take any tokens minted on OpenSea Shared Storefront

#36

This is a bad title on the HN submission. I suspect the title is intentionally designed to capture people's attention and mislead them. The article title is much better: Does OpenSea Shared Storefront have a backdoor? The submission title does not specify who can take anybody's tokens. Anyone who reads the article can see that the author claims that Open Sea administrators can seize anybody's tokens, and questions wh…

The original title is bad as well, because it is clickbaity.

Best title for submission would be: OpenSea administrators can take any tokens minted on the OpenSea Shared Storefront

Re: OpenSea administrators can take any tokens minted on OpenSea Shared Storefront

#37

I have been keeping tabs on digital currency/NFT news just out of sheer malicious curiosity. The "positive" news mostly seem to be "company X is trying out NFTs!". The high profiles cases don't seem to end up with a usable product or are outright cancelled Y months later with the whole thing labeledd as an "experiment". The negative news on the other-hand are pretty scarring - insane amounts of theft, bankruptcies, p…

Sales volume dropped from >$150M per day in the beginning of the year to ~$8M today (and the trend is still going down).

Keeping in mind this is an established market now (5+ years old) - and that the vast majority of sales are known to be wash trades - this is a small, extremely insignificant market.

Magic the Gathering, at this point, is substantially larger than the non-wash trade NFT market.

Re: OpenSea administrators can take any tokens minted on OpenSea Shared Storefront

#38
post #32
post #29

Earlier quoted context omitted.

I agree but it's noise and has nothing to do with the topic. Why do you want to encourage that instead of actually discussing the article? I was glad to see it flagged and dead after my comment, but then someone even vouched for it. Like it's such an important comment that it needs to be heard. Even the premise is questionable (does quality presuppose it is moral?) but it's obvious what the parent means and commentin…

The article is about the low-quality implementation of platforms selling NFTs. I don't see how discussing the lack of quality of NFTs themselves, the "product" they sell, falls too far off the tree.

That's a really far-fetched and generous interpretation. The comment is obviously just sarcastic NFT bashing, picking up on the lowest denominator in the parent comment and not talking about the platform or article at all. Come on, we can do better. Instigating another generic NFT flame war is pointless and off-topic.

Re: OpenSea administrators can take any tokens minted on OpenSea Shared Storefront

#39

This is a bad title on the HN submission. I suspect the title is intentionally designed to capture people's attention and mislead them. The article title is much better: Does OpenSea Shared Storefront have a backdoor? The submission title does not specify who can take anybody's tokens. Anyone who reads the article can see that the author claims that Open Sea administrators can seize anybody's tokens, and questions wh…

The original title is bad as well, because it is clickbaity. Best title for submission would be: OpenSea administrators can take any tokens minted on the OpenSea Shared Storefront

Ok, done. (Submitted title was "Backdoor in OpenSea allows to take anybody's tokens".) Thanks!

Re: OpenSea administrators can take any tokens minted on OpenSea Shared Storefront

#40
post #22

I find it really weird that they had to decompile the smart contract. That surprised, me I thought the whole point of these smart contracts were that everyone could see them like the transactions that take place.

Seeing the contract doesn't mean it's in easy to read format. Any software of sufficient size becomes something which you need to put in effort to analyze even if you have source code. And that's ignoring possibility of obfuscation. The stuff that uploaded to Etherium blockchain and executed is bytecode for Etherium virtual machine. Which makes sense, because it's much easier to precisely define semantics and ensure that multiple different implementations behave exactly the same for a small vm than it is for higher level programming languages.

Some websites like etherscan show the the source code with the version of compiler which was used to compile it. I assume that it works by author of contract uploading original source to the website as gesture that there is nothing to hide. But not every author does that. Assuming a reproducible build the website and anyone else who wants can then verify that it's the original (ore equivalent to original) source code by compiling it with specified compiler version. If the compiled output matches with what's on blockchain, it's then relatively safe to assume it's the original source code and analyze that instead of decompiling bytecode.There is still a chance that clever person hid a backdoor by exploiting a bug or quirk of compiler, making it harder to find unless you reverse engineer compiled bytecode or aware of specific bug in that version of compiler.

Post reply on HN