NFTregistration platform Premint, which over the weekend suffereda hack that saw over 300 NFTs stolen from usersâ wallets, announced today that it intends to repay the hackâs victims.
In alive-streamed incident updatethis afternoon, Premint CEO Brenden Mulligan announced that the company, in collaboration with âa third-party, non-Premint employeeâ performed on-chain analysis this week to compile a list of all NFTs stolen during Sundayâs hack.
Over the course of this week, every associated cryptowalleton that list will receive a payment inEthereum(ETH) equivalent to the collection floor price of every stolen NFT as of 10:00 a.m. PST this morning. Mulligan toldDecryptthe total sum that Premint will repay to defrauded customers will amount to around 340 ETH, or just over $525,000.
âI realize that the NFTs stolen were not all floor NFTs,â Mulligan said this morning. "Floor" refers to the cheapest available NFT of a given collection. Some of the NFTs stolen were considered rare and valued at a much higher market price than those priced at the floor. âYou might feel like this compensation isnât enough. But I donât think thereâs any other scalable and objective way to do this,â said the Premint CEO.
There are two prominent exceptions to that repayment policy: the two most expensive NFTs stolen on Sunday, aBored Apethe hackers flipped for 89 ETH ($138,000), and anAzukithey sold for just over 10 ETH ($16,000). Mulligan announced today that Premint was able to buy both NFTs off their new owners at purchase price, and has since returned them to their pre-hack owners. Mulligan stated these were the most valuable NFTs taken by the hackers âby orders of magnitude.â
During the announcement, Mulligan stated his general aversion to repaying the victims of digital asset hacks. âI have this feeling, and many others have this feeling, that compensation in this world, when a hack happens, actually has a negative long-term effect,â Mulligan said. âBecause it doesnât teach people a lesson.â
On Sunday, hackers infiltrated popular NFT registration platform Premint and made away with 320 stolen NFTs and more than $400,000 in profit in one of the biggest such hacks this year. Accordi...
Mulligan claimed that âthe vast majority of people'' heâs consulted since the hack âhave told me that we shouldnât have any compensation.â Despite this, because the hack occurred within Premintâs own site, Mulligan felt the event constituted a one-time exception to his philosophy.
On Sunday, hackers compromised Premintâs site with malicious JavaScript code, and created a pop-up within the site directing users to verify their wallet ownership, ostensibly as an additional security measure. The hackers then infiltrated the wallets of duped customers, stole 321 NFTs, and quickly sold most of them, to the tune of over $400,000 at the time.
In a gesture of the companyâs long-term commitment to user security, Mulligan also announced today that Premint has acquired wallet authentication toolVulcan. Mulligan said more details on that partnership will come next week.
Sundayâs hack was only the latest scam to target the NFT market, which last year alone generated $25 billion in sales. In February, a phishing scam on OpenSeastole over $1.7 million worth of NFTs. In April, a hack of Bored Ape Yacht Clubâs instagram accountled to a $2.8 million NFT theft. Last month, actor Seth Greenpaid almost $300,000 to recover a stolen Bored Ape NFThe was planning to make the centerpiece of an upcoming television series.
A common thread linking many such NFT thefts is the involvement of centralized sites and platforms like Premint, to which users give some amount of private information in exchange for convenience and novel features. While giving wallet information over to a centralized platform can expose users to additional risks, it can also offer certain protections, like todayâs repayment scheme.
âItâs been a horrible experience for me personally, and the team,â Mulligan said of the weekâs events. âHopefully with this weâre ready to move on.â
https://decrypt.co/105585/premint-return-500k-ethereum-nft-hack-victims