TGViewer
HackenProof - Crypto Bug Bounty HackenProof - Crypto Bug Bounty @hackenproof · 722 subscribers
Post #54 362
How to hack into NFT websites?

Uploading files is used for hacking NFT marketplaces

If a company uses the IPFS server for storing NFTs, there is always a possibility to upload malicious files. That’s because IPFS typically render the HTML content.

This vulnerability can be exploited by injection of the JavaScript payload to the uploaded file.

Check our blog or Twitter to learn more about this vulnerability


💬 Twitter
  • 🔥 4
More from @hackenproof
  1. Sep 29, 2026✅ [New bug bounty] Ult has been listed on HackenProof: The project rewards up to $20,000 p…
  2. Sep 14, 2026✅ [New Audit Contest] @RainCommunityGroup Smart contract Audit Contest is LIVE on HackenPr…
  3. Sep 14, 2026✅ [New bug bounty] Hotcoin has been listed on HackenProof! A new Web & Mobile bug bounty p…
  4. Sep 10, 2026✅ [New DualDefense Audit Contest] A fresh challenge just dropped on HackenProof! The DualD…
  5. Sep 4, 2026✅ [New bug bounty] @hinkal_protocol has been listed on HackenProof: The project rewards up…
  6. Sep 1, 2026✅ [New DualDefense Audit Contest] A fresh challenge just dropped on HackenProof! The DualD…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →