Banksy Was Warned About Website Flaw Before NFT Hack Scam

Share post:

Professional US ethical hacker Sam Curry informed Banksy’s team that the artist’s website had a security flaw, seven days before a hacker defrauded a fan out of $336,000.

Curry, who is also the founder of security consulting firm Palisade, explained the earlier warnings: “I was in a security forum and multiple people were posting links to the site. I’d clicked one and immediately saw it was vulnerable, so I reached out to Banksy’s team via email as I wasn’t sure if anyone else had. They didn’t respond over email, so I tried a few other ways to contact them including their Instagram, but never received a response.”

While the new site, named “”, was deleted soon after the auction, Curry informed that the site vulnerability “allowed you to create arbitrary files on the website” and publish your own pages and content.

The vulnerability has since been fixed, and the affected British NFT collector who was scammed reported that the hacker returned most of the money to him at the end of the day.

For more information, read the original story on the BBC.



Related articles

Microsoft announces enhanced security feature for OneNote

Microsoft has released further information on the increased security measures it is deploying for OneNote in order to...

Russian hacker group steals Emails of NATO officials and diplomats

Since February 2023, a Russian hacking gang known as TA473 or 'Winter Vivern' has targeted unpatched Zimbra endpoints...

Canadian cybersecurity accelerator counts its accomplishments

A Canadian university-associated business accelerator for helping early-stage cybersecurity companies says its first two years of operation have been more than satisfactory. The Rogers Cybersecure Catalyst Accelerator has had “an incredible impact” on Canadian cybersecurity entrepreneurs and founders, executive director Charles Finlay said this week in the first report on the program’s progress. Despite having

Crackdown on ransomware gangs yet to show an impact: OpenText

In its annual cybersecurity report OpenText also looked at malware, phishing and infec

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways