OpenSea reports third party data breach

OpenSea, the American NFT (non-fungible token) marketplace, notified its users of a critical security breach involving a third-party vendor. The company discovered that this breach potentially exposed users' OpenSea API keys.

OpenSea urged immediate action, advising them to discontinue the use of their existing API keys and generate new ones. These new keys will maintain the same permissions and rate limits as the expiring ones. The deadline for this key replacement process is set for October 2, 2023.

Despite assuring users that the breach is not expected to cause an immediate disruption to their platform integration, OpenSea cautioned that unauthorized third-party access could affect rate and usage limits.

The company did not disclose the number of affected users or specify if additional data beyond API keys may be compromised.

This security incident follows a similar breach involving Nansen, a blockchain analytics platform, and its third-party vendor.