phil on Warpcast

phil pfp

Spam NFTs aren't just annoying; they're nefarious. Since many wallets automatically index and display new NFTs, bad actors can use tracking pixels in the NFT thumbnail metadata to scrape the time and IP address whenever you open your wallet. Avoid NFT autodetection!

16 replies

21 recasts

109 reactions

nybble pfp

i believe this is the same issue as auto loading images in email. it’s a thorny issue to solve - directly a convenience vs privacy battle.

1 reply

0 recast

1 reaction

borodutch pfp

@warpcastadmin.eth

unless the nft metadata is indexed by the platform where you view it (e.g., opensea)

1 reply

0 recast

1 reaction

Dan Finlay 🦊 pfp

Dan Finlay 🦊

Thank you for recognizing this. It’s been a moloch race to the bottom for wallets to try to highlight their aggressive detection as a feature, only to put users at greater risk. It scares me that the lack of user awareness will create a market that selects for insecure but expected behavior.

1 reply

1 recast

7 reactions

misha 🪨 pfp

@mishaderidder.eth

wish someone would build a wallet washer 🧼🫧

2 replies

1 recast

3 reactions

greyseymour.eth pfp

greyseymour.eth

Once, I managed to trick one of the creators of a spam/scam NFT into thinking I was a peer. This guy had orchestrated one of the more successful campaigns (per external verification, not his word, to be clear) on this front. He mentioned he was earning about $750/mo from it. Fascinating to me, effort vs pay…

0 reply

1 recast

0 reaction

grant 🌈 🎩 🐸 pfp

grant 🌈 🎩 🐸

They usually are trying to get users to open a link on OpenSea, or thru Etherscan They will do a fake collection, put a stink bid on OS, then when it fails users look at the details and are led to the scam swap site that has a wallet drainer At least the etherscan ones put the url in failed tx data, higher effort

0 reply

0 recast

1 reaction

Kaloh pfp

This is a serious issue

0 reply

0 recast

0 reaction

shazow pfp

👏 only load fully onchain or IPFS media through a gateway of your choice 👏

0 reply

0 recast

1 reaction

kerman pfp

Any more technical deets on this? Want to understand it deeper.

0 reply

0 recast

0 reaction

Shashank pfp

infrastructure companies like simplehash/ alchemy provide solutions for this which provide a good starting point

0 reply

0 recast

0 reaction

Dharmesh pfp

Holy fuck! Didnt knew that. Thanks for sharing man.

0 reply

0 recast

2 reactions

Yahav pfp

THIS IS NOT A SOLANA SHILL ( I actually think current trend is a fad), but the one thing I like is that you can burn scam NFTs for $SOL on the network.

1 reply

0 recast

1 reaction

timdaub pfp

yeah and back when I did the SBT specs people put the responsibility for solving that on me! How misguided, it‘s clearly a wallet‘s job

0 reply

0 recast

1 reaction

Skittles (Josh) pfp

Skittles (Josh)

We’ve made it a priority at @simplehash to combat spam in partnership with a lot of wallets. Though our spam scoring isn’t perfect, we’re continually improving!

0 reply

0 recast

0 reaction

Doli 🎩 pfp

@deadserious.eth

we'll just never get rid of spam will we

0 reply

0 recast

0 reaction

Christina BorrowLucid | Chones pfp

Christina BorrowLucid | Chones

@borrowlucid.eth

The one that almost got me was for metaverse robot porn.

0 reply

0 recast

0 reaction

dustind.eth 🙏🏼 pfp

dustind.eth 🙏🏼

Huge problemo. Also when you get a legit airdrop it gets buried. Terrible UX if wallets don’t have it figured out.

0 reply

0 recast

0 reaction

ZELDA pfp

Fr !! How do one get to burn them ?

1 reply

0 recast

0 reaction