May 29th, 2022

TL;DR:

If you list your Moonbird for sale on OpenSea, LooksRare, etc. you must expect that the Moonbird can be sold for the price you chose when signing the listing, due to a smart contract bug. Don’t treat nesting as a security feature to stop your Moonbirds from being sold.

What must I do?

If you have not listed your Moonbird for sale, nothing. If you have listed your Moonbird for sale, but don’t want it sold, cancel any listings for Moonbirds. OpenSea hides listings for nested Moonbirds, but you can find and cancel them here. Other platforms allow you to cancel nested listings just like any other.

Are my Moonbirds at risk?

If you don’t have any marketplace sale listings, or you’ve canceled all of them, then there is no additional risk.

If I want to sell my nested Moonbird, what should I do?

The same process as previously recommended. Unnest your Moonbird, then list it for sale on your favorite Marketplace.

Has anyone been impacted by this bug?

Not to our knowledge. We can tell this from analyzing all contract transactions.

Are you moving to a new smart contract?

No, this is the only bug we’ve discovered, and due to its minimal impact, we will not be migrating to a new smart contract.