OpenSea Fake ConeHeads Collection: Difference between revisions

From Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository
Jump to navigation Jump to search
(Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/openseafakeconeheadscollection.php}} {{Unattributed Sources}} thumb|OpenSea MarketplaceA warning was posted on Reddit about fake Cones being sold on OpenSea, a decentralized marketplace for NFTs. The original post alerted users to the presence of fraudulent NFT listings that imitated the legitimate Cone NFTs. The fake listings lacked the blue checkmark next to the collection n...")
 
(Another 30 minutes complete. All sources merged in. Prevention added. Information relocated around.)
 
Line 1: Line 1:
{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/openseafakeconeheadscollection.php}}
{{Case Study Under Construction}}[[File:Opensea.jpg|thumb|OpenSea Marketplace]]A warning was posted on Reddit about fake Cone Head NFTs being sold on OpenSea, a decentralized marketplace for NFTs. The original post alerted users to the presence of fraudulent NFT listings that imitated the legitimate Cone Head NFTs. The fake listings lacked the blue checkmark next to the collection name, which is a sign of a verified collection. The community members in the comments section reported the fake listings and shared tips on how to identify genuine NFTs. They mentioned that legitimate Cone Head NFTs should have a "Reddit" label in the name and a blue/white icon next to it, indicating it's from the "Imagination station x reddit collection." A discussion ensued emphasizing the importance of reporting bad actors, staying safe, and being cautious when purchasing NFTs. Users shared their experiences of almost falling for scams and thanked the original poster for raising awareness.
{{Unattributed Sources}}


[[File:Opensea.jpg|thumb|OpenSea Marketplace]]A warning was posted on Reddit about fake Cones being sold on OpenSea, a decentralized marketplace for NFTs. The original post alerted users to the presence of fraudulent NFT listings that imitated the legitimate Cone NFTs. The fake listings lacked the blue checkmark next to the collection name, which is a sign of a verified collection. The community members in the comments section reported the fake listings and shared tips on how to identify genuine NFTs. They mentioned that legitimate Cone NFTs should have a "reddit" label in the name and a blue/white icon next to it, indicating it's from the "Imagination station x reddit collection." The discussion emphasized the importance of reporting bad actors, staying safe, and being cautious when purchasing NFTs. Users shared their experiences of almost falling for scams and thanked the original poster for raising awareness about the issue.
== About Cone NFTs ==
TBD


This is a global/international case not involving a specific country.<ref name="redditold-11468" /><ref name="redditoldarchive-11469" />
Cone Head NFTs On OpenSea: <ref>[https://opensea.io/collection/imagination-station-x-reddit-collectible-avatars Imagination Station x Reddit Collectible Avatars - OpenSea] (Sep 1, 2023)</ref>


== About OpenSea ==
Real Cone Head NFT: <ref name=":0">[https://opensea.io/assets/matic/0x5846728730366d686cdc95dae80a70b44ec9eab2/445 Cone Head #146 NFT - OpenSea] (Sep 1, 2023)</ref>
A warning was posted on Reddit about fake Cones being sold on OpenSea, a decentralized marketplace for NFTs. The original post alerted users to the presence of fraudulent NFT listings that imitated the legitimate Cone NFTs. The fake listings lacked the blue checkmark next to the collection name, which is a sign of a verified collection. The community members in the comments section reported the fake listings and shared tips on how to identify genuine NFTs. They mentioned that legitimate Cone NFTs should have a "reddit" label in the name and a blue/white icon next to it, indicating it's from the "Imagination station x reddit collection." The discussion emphasized the importance of reporting bad actors, staying safe, and being cautious when purchasing NFTs. Users shared their experiences of almost falling for scams and thanked the original poster for raising awareness about the issue.


This is a global/international case not involving a specific country.
<blockquote>This series was created by Reddit user Chipperdoodle as a part of the Collectible Avatars Creator Program. You can check out the creator's profile on Reddit.


The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.
Collectible Avatars are limited-edition avatars from Reddit that provide owners with unique benefits on the Reddit platform. The Creator Collection was made by independent creators in partnership with Reddit. When you purchase a Collectible Avatar, you become the owner of it. This means you can keep it, trade it, sell it, or use it on Reddit as your avatar, where Collectible Avatar owners get a special profile treatment that makes them stand out.</blockquote>


Include:
== About OpenSea ==
 
TBD
* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.
 
Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.


== The Reality ==
== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:
This was an unverified listing without the typical blue checkmark.


* When the service was actually started (if different than the "official story").
Scammers will often create fake NFT listings on OpenSea. Transactions on the blockchain are generally irreversible.
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.


== What Happened ==
== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
A fake collection of Cone Head NFTs was found on OpenSea and discussed on Reddit.
{| class="wikitable"
{| class="wikitable"
|+Key Event Timeline - OpenSea Fake ConeHeads Collection
|+Key Event Timeline - OpenSea Fake ConeHeads Collection
Line 46: Line 30:
|September 18th, 2022 2:40:58 PM MDT
|September 18th, 2022 2:40:58 PM MDT
|Reddit Thread
|Reddit Thread
|The incident is reported on Reddit.
|A Reddit post was submitted by Reddit user _echnaton which has a screenshot of a fake Cone Head NFT listing, as viewed on their smartphone. The original post alerted users to the presence of fraudulent NFT listings that imitated the legitimate Cone NFTs. The fake listings lacked the blue checkmark next to the collection name, which is a sign of a verified collection<ref name="redditold-11468" /><ref name="redditoldarchive-11469" />.
|}
|}


== Technical Details ==
== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?
 
 
Real Cone NFT: <ref name=":0" />
 
Advice From OpenSea: <ref>https://support.opensea.io/hc/en-us/articles/360063519133-What-is-a-verified-account-or-badged-collection- (Sep 1, 2023)</ref>


== Total Amount Lost ==
== Total Amount Lost ==
The total amount lost is unknown.
The total amount lost is unknown. It is unclear whether anyone purchased NFTs from the fraudulent collection.
 
== Immediate Reactions ==
TBD
 
=== Post On Reddit ===
A Reddit post was submitted by Reddit user _echnaton which has a screenshot of a fake Cone Head NFT listing, as viewed on their smartphone<ref name="redditold-11468" /><ref name="redditoldarchive-11469" />.


How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
=== Community Reactions ===
The community members in the comments section reported the fake listings and shared tips on how to identify genuine NFTs. They mentioned that legitimate Cone NFTs should have a "reddit" label in the name and a blue/white icon next to it, indicating it's from the "Imagination station x reddit collection." The discussion emphasized the importance of reporting bad actors, staying safe, and being cautious when purchasing NFTs. Users shared their experiences of almost falling for scams and thanked the original poster for raising awareness about the issue.


== Immediate Reactions ==
<ref>[https://old.reddit.com/r/avatartrading/comments/xhrghv/deleted_by_user/ioz8swy/ Candycanestar - "Just reported it, everyone report! Thanks" - Reddit] (Sep 1, 2023)</ref><ref>[https://old.reddit.com/r/avatartrading/comments/xhrghv/deleted_by_user/iozolvt/ YaBastaaa - "Thank you so much for sharing a wealth of knowledge, we need to report all those bad actors if you catch one . Please be safe !" - Reddit] (Sep 1, 2023)</ref><ref>[https://old.reddit.com/r/avatartrading/comments/xhrghv/deleted_by_user/iozpyen/ osoese - "this is an important post. I spotted a fake reddit avatar like a week ago and did report it, but I was alarmed because I almost clicked buy. The only reason I did not buy that (drip squad) was because it did not have the characteristics which caused me to look closer. But, the cones and other populare series don't have anything but a number. So, the way I prevent accidental fakes now is write the name of the NFT series and the word reddit like "kid rexie reddit" and the search on opensea populates the list where you can tell all the results in the series are legit. I don't know how else to explain that, but you will know it when you see it. Once you get to the first legit item you can then scroll down and click more from this collection or whatever at the bottom... - and if the NFT you are looking at is not in the series then it's a fake." - Reddit] (Sep 1, 2023)</ref><blockquote>Just reported it, everyone report! Thanks</blockquote><blockquote>Thank you so much for sharing a wealth of knowledge, we need to report all those bad actors if you catch one . Please be safe !</blockquote><blockquote>this is an important post. I spotted a fake reddit avatar like a week ago and did report it, but I was alarmed because I almost clicked buy. The only reason I did not buy that (drip squad) was because it did not have the characteristics which caused me to look closer. But, the cones and other populare series don't have anything but a number. So, the way I prevent accidental fakes now is write the name of the NFT series and the word reddit like "kid rexie reddit" and the search on opensea populates the list where you can tell all the results in the series are legit. I don't know how else to explain that, but you will know it when you see it. Once you get to the first legit item you can then scroll down and click more from this collection or whatever at the bottom... - and if the NFT you are looking at is not in the series then it's a fake.</blockquote>
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?


== Ultimate Outcome ==
== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?
The fraudulent listing was removed. TBD


== Total Amount Recovered ==
== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.
There do not appear to have been any funds recovered in this case.
What funds were recovered? What funds were reimbursed for those affected users?


== Ongoing Developments ==
== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
TBD
== Individual Prevention Policies ==
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}
Individuals need to educate themselves on how to spot fake listings, and always be on the look out for them. It doesn't take long to double check against a few official sites prior to any purchase, and in this case the fake listing did not even have an official blue checkmark.
 
{{Prevention:Individuals:Double Check Transactions}}


{{Prevention:Individuals:End}}
{{Prevention:Individuals:End}}


== Platform Prevention Policies ==
== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}
A key part of the success of these frauds is lack of education by users on how to spot fake NFT listings. This should be standard training for anyone looking to purchase NFTs. In the event of users losing funds, it's important to be able to assist.
 
{{Prevention:Platforms:Cryptocurrency Safety Quiz}}
 
{{Prevention:Platforms:Establish Industry Insurance Fund}}


{{Prevention:Platforms:End}}
{{Prevention:Platforms:End}}


== Regulatory Prevention Policies ==
== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}
A key part of the success of these frauds is lack of education by users on how to spot fake NFT listings. This should be standard training for anyone looking to purchase NFTs. In the event of users losing funds, it's important to be able to assist.
 
{{Prevention:Regulators:Cryptocurrency Education Mandate}}
 
{{Prevention:Regulators:Establish Industry Insurance Fund}}


{{Prevention:Regulators:End}}
{{Prevention:Regulators:End}}


== References ==
== References ==
<references><ref name="redditold-11468">[https://old.reddit.com/r/avatartrading/comments/xhrghv/beware_fake_cones_on_opensea/ <nowiki>[deleted by user] : avatartrading</nowiki>] (Oct 13, 2022)</ref>
<references>
 
<ref name="redditold-11468">[https://old.reddit.com/r/avatartrading/comments/xhrghv/beware_fake_cones_on_opensea/ _echnaton - Beware: Fake Cones on Opensea - Reddit] (Oct 13, 2022)</ref>
<ref name="redditoldarchive-11469">[https://web.archive.org/web/20220918235920/https://old.reddit.com/r/avatartrading/comments/xhrghv/beware_fake_cones_on_opensea/ Beware: Fake Cones on Opensea : avatartrading] (Aug 18, 2023)</ref></references>
<ref name="redditoldarchive-11469">[https://web.archive.org/web/20220918235920/https://old.reddit.com/r/avatartrading/comments/xhrghv/beware_fake_cones_on_opensea/ _echnaton - Beware: Fake Cones on Opensea - Reddit Archive September 18th, 2022 5:59:20 PM MDT] (Aug 18, 2023)</ref>
</references>

Latest revision as of 12:07, 1 September 2023

Notice: This page is a new case study and some aspects have not been fully researched. Some sections may be incomplete or reflect inaccuracies present in initial sources. Please check the References at the bottom for further information and perform your own additional assessment. Please feel free to contribute by adding any missing information or sources you come across. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

OpenSea Marketplace

A warning was posted on Reddit about fake Cone Head NFTs being sold on OpenSea, a decentralized marketplace for NFTs. The original post alerted users to the presence of fraudulent NFT listings that imitated the legitimate Cone Head NFTs. The fake listings lacked the blue checkmark next to the collection name, which is a sign of a verified collection. The community members in the comments section reported the fake listings and shared tips on how to identify genuine NFTs. They mentioned that legitimate Cone Head NFTs should have a "Reddit" label in the name and a blue/white icon next to it, indicating it's from the "Imagination station x reddit collection." A discussion ensued emphasizing the importance of reporting bad actors, staying safe, and being cautious when purchasing NFTs. Users shared their experiences of almost falling for scams and thanked the original poster for raising awareness.

About Cone NFTs

TBD

Cone Head NFTs On OpenSea: [1]

Real Cone Head NFT: [2]

This series was created by Reddit user Chipperdoodle as a part of the Collectible Avatars Creator Program. You can check out the creator's profile on Reddit. Collectible Avatars are limited-edition avatars from Reddit that provide owners with unique benefits on the Reddit platform. The Creator Collection was made by independent creators in partnership with Reddit. When you purchase a Collectible Avatar, you become the owner of it. This means you can keep it, trade it, sell it, or use it on Reddit as your avatar, where Collectible Avatar owners get a special profile treatment that makes them stand out.

About OpenSea

TBD

The Reality

This was an unverified listing without the typical blue checkmark.

Scammers will often create fake NFT listings on OpenSea. Transactions on the blockchain are generally irreversible.

What Happened

A fake collection of Cone Head NFTs was found on OpenSea and discussed on Reddit.

Key Event Timeline - OpenSea Fake ConeHeads Collection
Date Event Description
September 18th, 2022 2:40:58 PM MDT Reddit Thread A Reddit post was submitted by Reddit user _echnaton which has a screenshot of a fake Cone Head NFT listing, as viewed on their smartphone. The original post alerted users to the presence of fraudulent NFT listings that imitated the legitimate Cone NFTs. The fake listings lacked the blue checkmark next to the collection name, which is a sign of a verified collection[3][4].

Technical Details

Real Cone NFT: [2]

Advice From OpenSea: [5]

Total Amount Lost

The total amount lost is unknown. It is unclear whether anyone purchased NFTs from the fraudulent collection.

Immediate Reactions

TBD

Post On Reddit

A Reddit post was submitted by Reddit user _echnaton which has a screenshot of a fake Cone Head NFT listing, as viewed on their smartphone[3][4].

Community Reactions

The community members in the comments section reported the fake listings and shared tips on how to identify genuine NFTs. They mentioned that legitimate Cone NFTs should have a "reddit" label in the name and a blue/white icon next to it, indicating it's from the "Imagination station x reddit collection." The discussion emphasized the importance of reporting bad actors, staying safe, and being cautious when purchasing NFTs. Users shared their experiences of almost falling for scams and thanked the original poster for raising awareness about the issue.

[6][7][8]

Just reported it, everyone report! Thanks

Thank you so much for sharing a wealth of knowledge, we need to report all those bad actors if you catch one . Please be safe !

this is an important post. I spotted a fake reddit avatar like a week ago and did report it, but I was alarmed because I almost clicked buy. The only reason I did not buy that (drip squad) was because it did not have the characteristics which caused me to look closer. But, the cones and other populare series don't have anything but a number. So, the way I prevent accidental fakes now is write the name of the NFT series and the word reddit like "kid rexie reddit" and the search on opensea populates the list where you can tell all the results in the series are legit. I don't know how else to explain that, but you will know it when you see it. Once you get to the first legit item you can then scroll down and click more from this collection or whatever at the bottom... - and if the NFT you are looking at is not in the series then it's a fake.

Ultimate Outcome

The fraudulent listing was removed. TBD

Total Amount Recovered

There do not appear to have been any funds recovered in this case.

Ongoing Developments

TBD

Individual Prevention Policies

Individuals need to educate themselves on how to spot fake listings, and always be on the look out for them. It doesn't take long to double check against a few official sites prior to any purchase, and in this case the fake listing did not even have an official blue checkmark.

Every approval on Web3 is an opportunity to lose all of the funds present in your wallet. Take the time to review the transaction in full. Fully check over the balance, permissions, and entire address which you are interacting with. Do not trust that your clipboard or any website front-end is guaranteed to provide an accurate address or transaction status. Always perform a test transaction prior to the first high-value transaction in any session.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

A key part of the success of these frauds is lack of education by users on how to spot fake NFT listings. This should be standard training for anyone looking to purchase NFTs. In the event of users losing funds, it's important to be able to assist.

Never take for granted the limited knowledge of users of your service and their tendency to skip past provided information. It is recommended to design a simple tutorial and quiz for new users which explains the basics of seed phrases, strong password generation, secure two-factor authentication, common fraud schemes, how ponzi schemes work, as well as other risks which are unique to the cryptocurrency space. This tutorial and quiz should ensure their understanding and be a standard part of the sign-up or download process which is difficult or impossible to skip.

Work with other industry platforms to set up a multi-signature wallet with private keys held separately by delegate signatories from seven prominent platforms and services within the industry. Establish requirements for contributions by all platforms and services, designed to be affordable for small platforms yet large enough to cover anticipated breach events. Any breach event can be brought forth by a member platform or a petition of 100 signatures for consideration by the delegate signatories. A vote of 4 or more delegate signatures is required to release any funds, which could partially or fully restore lost funds based on their assessment.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

A key part of the success of these frauds is lack of education by users on how to spot fake NFT listings. This should be standard training for anyone looking to purchase NFTs. In the event of users losing funds, it's important to be able to assist.

Create a standard tutorial and quiz for all new cryptocurrency participants, which is required to be completed once per participant. This tutorial and quiz should cover the basics of proper seed phrase protection, strong password generation, secure two-factor authentication, common fraud schemes, how to detect and guard against phishing attacks, how ponzi schemes work, as well as other risks which are unique to the cryptocurrency space.

Set up a multi-signature wallet with private keys held separately by delegate signatories from seven prominent platforms and services within the industry. Establish requirements for contributions by all platforms and services within the country, designed to be affordable for small platforms yet large enough to cover anticipated breach events. Any breach event can be brought forth by a member platform or a petition of 100 signatures for consideration by the delegate signatories. A vote of 4 or more delegate signatures is required to release any funds, which could partially or fully restore lost funds based on their assessment.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.

References

  1. Imagination Station x Reddit Collectible Avatars - OpenSea (Sep 1, 2023)
  2. 2.0 2.1 Cone Head #146 NFT - OpenSea (Sep 1, 2023)
  3. 3.0 3.1 _echnaton - Beware: Fake Cones on Opensea - Reddit (Oct 13, 2022)
  4. 4.0 4.1 _echnaton - Beware: Fake Cones on Opensea - Reddit Archive September 18th, 2022 5:59:20 PM MDT (Aug 18, 2023)
  5. https://support.opensea.io/hc/en-us/articles/360063519133-What-is-a-verified-account-or-badged-collection- (Sep 1, 2023)
  6. Candycanestar - "Just reported it, everyone report! Thanks" - Reddit (Sep 1, 2023)
  7. YaBastaaa - "Thank you so much for sharing a wealth of knowledge, we need to report all those bad actors if you catch one . Please be safe !" - Reddit (Sep 1, 2023)
  8. osoese - "this is an important post. I spotted a fake reddit avatar like a week ago and did report it, but I was alarmed because I almost clicked buy. The only reason I did not buy that (drip squad) was because it did not have the characteristics which caused me to look closer. But, the cones and other populare series don't have anything but a number. So, the way I prevent accidental fakes now is write the name of the NFT series and the word reddit like "kid rexie reddit" and the search on opensea populates the list where you can tell all the results in the series are legit. I don't know how else to explain that, but you will know it when you see it. Once you get to the first legit item you can then scroll down and click more from this collection or whatever at the bottom... - and if the NFT you are looking at is not in the series then it's a fake." - Reddit (Sep 1, 2023)