Slow Mist: Be wary of the risk of "zero-dollar purchase" phishing aimed at signing bulk pending orders in the Blur NFT market

SlowMist reminded that Scam Sniffer, a partner of SlowMist’s ecological security, recently demonstrated a “Zero Purchase” phishing attack test targeting the signature of batch pending orders in the Blur NFT market. "yuan purchase") to phishing away all the NFTs authorized by the target user on the Blur platform. The "Root signature" format of the Blur platform is similar to a "blind signature", and users cannot recognize the impact of this signature. The SlowMist security team has verified the feasibility and harmfulness of the attack, and hereby reminds all users of the Blur platform to be vigilant. When they find a "Root signature" that is not from Blur's official domain name (blur.io), they must reject it to avoid potential assets. loss.