NFT Art NFT Security and Best Practices 4 — Questions and Answers
Question 1: What is 'gas griefing' in the context of NFT smart contracts?
- When network congestion causes minting fees to spike unexpectedly
- When a malicious contract deliberately wastes a caller's gas to drain their ETH (Correct answer)
- When an NFT auction ends with no winning bid due to low network activity
- When artists set prohibitively high royalty fees that discourage resales
Correct answer: When a malicious contract deliberately wastes a caller's gas to drain their ETH
Gas griefing occurs when a contract's external calls are designed to consume excessive gas, draining the caller's Ether as a form of attack.
Question 2: What security advantage does ERC-721 offer over simply storing ownership records in a centralized database?
- ERC-721 tokens automatically generate higher resale values over time
- Ownership is stored immutably on-chain and cannot be altered by any single party (Correct answer)
- ERC-721 contracts include built-in copyright protection for the linked artwork
- Centralized databases cannot store image files above 10MB
Correct answer: Ownership is stored immutably on-chain and cannot be altered by any single party
On-chain ERC-721 ownership records are immutable and decentralized, meaning no company or server failure can erase or falsify ownership history.
Question 3: Which red flag most strongly suggests an NFT art collection is a scam?
- The collection has a fixed supply of exactly 10,000 pieces
- Anonymous team members with no verifiable track record and promises of guaranteed returns (Correct answer)
- The project charges a 10% artist royalty on secondary sales
- The collection uses a Dutch auction pricing model for minting
Correct answer: Anonymous team members with no verifiable track record and promises of guaranteed returns
Unverifiable anonymous teams combined with guaranteed return promises are classic hallmarks of fraudulent NFT projects designed to exit scam.
Question 4: How does a 'signature phishing' attack target NFT collectors?
- Hackers forge digital signatures on NFT certificate documents
- Victims are tricked into signing a malicious message that grants wallet access (Correct answer)
- Artists digitally sign NFTs with stolen credentials to fake authenticity
- Phishers copy a legitimate wallet signature to impersonate the owner
Correct answer: Victims are tricked into signing a malicious message that grants wallet access
Signature phishing tricks users into signing an off-chain message that secretly authorizes a malicious contract to transfer their NFTs or tokens.
Question 5: What does the 'setApprovalForAll' function in an ERC-721 contract do, and why is it dangerous?
- It enables all users on a marketplace to view an NFT's full metadata
- It grants a third-party address permission to transfer ALL of your NFTs in that collection (Correct answer)
- It automatically lists every NFT in a wallet for sale at the floor price
- It permanently locks an NFT from being transferred to prevent theft
Correct answer: It grants a third-party address permission to transfer ALL of your NFTs in that collection
setApprovalForAll grants an operator complete control over all your tokens in a contract, so approving a malicious address can result in total collection theft.
Question 6: Why should NFT art creators register their copyright before minting, even though the blockchain records creation date?
- Blockchain timestamps are not legally admissible in any US court
- Copyright registration provides stronger legal recourse and statutory damages in infringement cases (Correct answer)
- Unregistered works cannot be listed on regulated US NFT marketplaces
- Copyright registration automatically watermarks the artwork on-chain
Correct answer: Copyright registration provides stronger legal recourse and statutory damages in infringement cases
US copyright registration allows creators to sue for statutory damages and attorney's fees, providing much stronger legal remedies than blockchain proof alone.
Question 7: What is 'NFT wash trading' most commonly used to achieve in art markets?
- Converting cryptocurrency profits into tax-exempt charitable donations
- Creating artificial price history to manipulate perceived value and attract real buyers (Correct answer)
- Bypassing royalty payments owed to the original artist on resales
- Hiding the true identity of a collection's creator from regulators
Correct answer: Creating artificial price history to manipulate perceived value and attract real buyers
By trading an NFT between controlled wallets at escalating prices, scammers fabricate a convincing sales history that lures genuine buyers at inflated prices.
NFT Art NFT Security and Best Practices 4
What is 'gas griefing' in the context of NFT smart contracts?