Hacker News new | ask | show | jobs
by seanhunter 1290 days ago
Doesn't seem a very good idea to use anything like this (or call any method actually) except on NFTs where you have verified the code.

When you sign to authorize the contract to buy your worthless NFT, the contract will call something like safeTransfer(), but the NFT implementation of that method might actually just do something bad eg empty out your wallet.

This is a reasonably common means of crypto theft: drop an NFT into someone's wallet with malicious transfer code that actually steals their assets when they try to transfer it.