What Is Sleepminting And Will It Ruin NFT Provenance?
AI summary of the linked articleSleepminting is an impersonation attack described by Tim Daub, in which an attacker mints an NFT under another creator's name without that creator's involvement. The article's example uses a fake "Creator: beeple" listing on Rarible, with the attacker minting to a victim address and later transferring the piece to a buyer. The article argues that this is an interface issue rather than a security vulnerability, since beeple's account was never accessed. It says the fake can be spotted by checking that both the mint transaction's sender and the NFT's sender match the creator's correct address. |
Recommended by 3 curators |
1 comment I remember sleepminting being a popular subject on Crypto Twitter about 2-3 years ago, and I'm happy to finally learn how it works. I haven't heard about attacks using this method, though - do you know @timdaub if NFT platforms implemented some security measures, or is it just a very niche type of attack? |
