The Whole Scheme

A hacker, most likely using a phishing scheme designed to mimic the OpenSea list contract migration email, was able to gather valid tx signatures from multiple NFT holders. These signatures, combined with a custom contract acting as the buyer, successfully tricked OpenSea into selling the victims' NFTs for $0 in a series of private sales. Fortunately for law enforcement, the hacker made several mistakes along the way. This series details the actions and Operational Security (OpSec) errors by the hacker during this scheme, given what we knew while it was happening.