In July of the same year, OpenSea cautioned its users about potential phishing attacks after a data breach exposed email addresses linked to user accounts.
In response to our inquiry, an OpenSea spokesperson clarified that the breach was linked to a third-party vendor rather than the company itself. However, they declined to disclose the extent of the impact, stating, “One of our third-party vendors experienced a security incident that may have exposed information about OpenSea API keys. The keys do not provide access to, or the ability to change, any OpenSea user information. Rather, they provide access to our public API with increased rate limits. Unauthorized use of an API key could mean a developer would not be able to enjoy their full rate limits. We notified developers to deprecate and replace their API key so they could preserve their rate limits.”
