OAK — OnChain Attack Knowledge

Worked example · 2022-11

X2Y2 + LooksRare royalty-optional shift — Ethereum — 2022-08 through 2023 (cohort case)

Loss
no single direct-loss figure attaches to this cohort because the failure mode is the standard-vs-enforcement gap on NFT creator royalty payments documented in OAK-T12.003, not direct theft. The cohort harm is borne by NFT collection creators who rely on royalty income as a primary revenue model and whose realised-royalty-rate dropped materially across 2022–2023 as a non-trivial share of secondary trading migrated to royalty-optional or zero-royalty venues. Public NFT-analytics estimates of creator-royalty revenue across the Ethereum NFT market across the cohort window suggest a multi-tens-of-percent reduction in realised royalty payments to creators relative to the OpenSea-pre-2022-baseline rate, with material per-collection variance depending on the collection's marketplace volume mix. The economic transfer is from creators (lower realised royalty income) to traders (lower per-trade fee burden) and to marketplaces (higher trader-side volume capture), with no single victim and no single legal cause of action.
OAK Techniques observed
OAK-T12.003 (Royalty Bypass / Marketplace Manipulation) is the canonical Technique mapping for the cohort. The T12.003 page describes the Technique as the structural consequence of a standard-vs-enforcement gap in ERC-2981 (the canonical NFT royalty interface); the X2Y2 + LooksRare 2022 cohort is the dated marketplace-policy event that, alongside the Blur 2022-10-19 launch (separately documented in the techniques/T12.003-royalty-bypass-marketplace-manipulation.md Real-world examples section), made the standard-vs-enforcement gap a material economic question on Ethereum. The cohort is the marketplace-side antecedent to OpenSea's November 2022 Operator Filter Registry response (see examples/2023-08-opensea-operator-filter-sunset.md for the 2023-08 sunset event of that response).
Attribution
confirmed — both X2Y2 and LooksRare publicly announced their respective royalty-optionality changes via official marketplace communications. The X2Y2 royalty-optional shift was announced via X2Y2's official public communications in August 2022 (initially as flexibility for traders, ultimately settling at 0.5% recommended-minimum royalty after community pushback). The LooksRare royalty-policy adjustment was similarly publicly announced. Per-individual operator attribution does not apply at the policy-cohort layer; the marketplaces themselves are the publicly-named operators of the policy changes documented here.
Cohort framing
this is a cohort case in the policy-event sense — the X2Y2 and LooksRare royalty-policy changes occurred in adjacent windows in 2022 as part of a broader marketplace-policy realignment on Ethereum NFT royalty enforcement. The Blur 2022-10-19 launch with a customisable-royalty mechanism is the third leg of the same policy realignment; OAK separates the X2Y2 + LooksRare cohort from the Blur cohort because the operator history differs (X2Y2 and LooksRare started as full-royalty marketplaces and changed policy; Blur launched with the customisable-royalty mechanism as a baseline). The cohort case captures the Technique at the policy-realignment layer rather than at any single per-collection per-trade incident.
Key teaching point
The X2Y2 + LooksRare royalty-optionality cohort is OAK's canonical worked example for the marketplace-policy realignment that converted the ERC-2981 standard-vs-enforcement gap from a latent design choice into a material economic outcome on Ethereum. The case sits at the centre of T12.003 as the dated policy event that, alongside the Blur 2022-10-19 launch, made creator royalty income a contested rather than presumptively-enforced revenue model on the dominant chain.

Summary

ERC-2981 was finalised as Final in July 2021 as the canonical NFT royalty interface. The standard defines a royaltyInfo(tokenId, salePrice) query that lets a collection contract advertise a royalty recipient and basis-points rate for a given sale; the standard text explicitly notes that compliance on the taker side is voluntary — ERC-2981 binds information, not payment. Through 2021 and into early 2022, OpenSea's marketplace contracts enforced the advertised royalty rate as a default, which made the standard-vs-enforcement gap economically immaterial for creators on the dominant Ethereum NFT marketplace.

In August 2022, X2Y2 (a then-emerging Ethereum NFT marketplace launched in early 2022 with a token-airdrop incentive program) announced a shift to optional creator royalties. The framing in X2Y2's official communications was that the policy gave traders flexibility to choose how much royalty to pay on a per-listing basis, with the goal of making X2Y2's listing fees more competitive against OpenSea. After community pushback from creators and from collection issuers, X2Y2 settled on a 0.5% recommended-minimum royalty as the marketplace default, with traders retaining the ability to override. LooksRare made parallel adjustments to its royalty-payment posture across the same broad window. Through Q3 and Q4 of 2022, the cumulative effect of the X2Y2 and LooksRare policy adjustments was that a non-trivial share of Ethereum NFT secondary-market volume routed through marketplaces with materially-below-creator-stated royalty enforcement.

On 2022-10-19, Blur launched with a customisable-royalty mechanism by default — recommended-minimum 0.5% on most collections (with collection-specific defaults such as 8% on BAYC), but with buyer-side ability to set the per-trade royalty input as low as zero on collections without enforcement coupling. Blur is documented separately in the T12.003 Real-world examples section; it is the third leg of the 2022 marketplace-policy realignment on Ethereum NFT royalty enforcement.

OpenSea's response, in November 2022, was the Operator Filter Registry — a creator-side enforcement mechanism. Collections that opted in could specify an allowlist of marketplace operator contracts they wanted their NFTs traded through; transfers to non-allowlisted operators would revert. The intent was to give creators a way to refuse listing on royalty-optional marketplaces and thereby protect royalty income at the marketplace-policy layer. OpenSea launched the Operator Filter Registry in November 2022, transferred ownership to the Creator Ownership Research Institute (CORI) multisig in early 2023, and ultimately announced sunset of its enforcement on 2023-08-17 effective 2023-08-31, with a grace period continuing enforcement for already-opted-in collections through 2024-02-29. The 2023-08 sunset is documented as a separate worked example at examples/2023-08-opensea-operator-filter-sunset.md.

For OAK's purposes, the X2Y2 + LooksRare cohort is the canonical worked example for the marketplace-policy realignment that converted the ERC-2981 standard-vs-enforcement gap from a latent design choice into a material economic outcome on Ethereum. The case is intentionally non-partisan — many traders argue that ERC-2981 was always voluntary on the payment side and that the cohort outcome reflects the market resolving an ambiguous prior policy; many creators argue that the cohort outcome was a coordinated marketplace defection from the established enforcement equilibrium. OAK documents the case because the defensive question for creators deploying new collections in 2023 onward is materially different from the defensive question in early 2022, and the cohort is the dated event that made the difference real.

Timeline (UTC)

When Event OAK ref
2021-07 ERC-2981 finalised as Final; standard text explicitly does not bind taker-side payment (standard precedent)
2021 — early 2022 OpenSea marketplace contracts enforce ERC-2981-advertised royalty rates as default; standard-vs-enforcement gap economically immaterial on the dominant marketplace (pre-cohort baseline)
2022-01-11 LooksRare launches with token-airdrop incentive program; royalty enforcement initially aligned with OpenSea posture but evolves through the year (cohort precursor)
2022-02 X2Y2 launches as an Ethereum NFT marketplace with its own token-airdrop incentive program (cohort precursor)
2022-08 X2Y2 publicly announces shift to optional creator royalties; community pushback follows T12.003 policy event (X2Y2)
2022-08 → 2022-09 X2Y2 settles on a 0.5% recommended-minimum royalty default after community pushback; traders retain per-listing override T12.003 marketplace-policy adjustment
2022 (parallel) LooksRare adjusts royalty-payment posture across the same broad window in the direction of trader-flexibility T12.003 policy event (LooksRare)
2022-10-19 Blur launches with customisable-royalty mechanism (separate cohort leg; see T12.003 Real-world examples in the technique page) T12.003 (Blur leg)
2022-11 OpenSea announces and deploys the Operator Filter Registry as a creator-side enforcement response (Mitigation response)
2022-Q4 onward Per-collection effective royalty rate trends downward across Ethereum NFT volume mix as a non-trivial share migrates to royalty-optional / customisable-royalty venues T12.003 cohort observation
2023 (early) OpenSea transfers Operator Filter Registry ownership to the CORI multisig (governance handoff)
2023-08-17 OpenSea announces sunset of Operator Filter Registry enforcement effective 2023-08-31; grace period continues through 2024-02-29 (see examples/2023-08-opensea-operator-filter-sunset.md) T12.003 enforcement-sunset

What defenders observed

  • The cohort observation is at the per-collection effective royalty rate, not at any single per-trade event. A defender (or a creator) tracking realised royalty income across the cohort window observes the rate trending materially below the nominal stated rate as a function of the per-collection volume mix across marketplaces. NFT-analytics platforms (Nansen, Chainalysis, dappradar) published per-collection effective-royalty-rate metrics across the cohort window; the load-bearing collection-level signal is the divergence between the nominal stated rate and the realised rate weighted by per-marketplace volume share.
  • The Mitigation surface for creators is at deployment time, not at trade time. Creators deploying new collections in the post-cohort window face a deployment-time decision: ship with ERC-2981 metadata only (and accept that royalty payment is voluntary on the taker side), opt into the OpenSea Operator Filter Registry while it remained enforced (and accept the listing constraint that produces), or use ERC-721C-style enforcement coupling (LimitBreak's approach) that hard-couples transfer to a payment predicate. Each choice has material implications for marketplace listability and for royalty durability under future marketplace-policy changes.
  • The standard-side gap is the structural antecedent. ERC-2981's deliberate scoping to royalty information (rather than to royalty payment) is the under-specification that made the cohort outcome possible. Future standards work — successor proposals to ERC-2981 that bind taker-side payment, contract-level metadata standards such as EIP-7572 that improve marketplace-side policy interpretation — is the structural Mitigation path; OAK tracks these as the public record matures but does not endorse a specific successor at v0.1.
  • Marketplace-policy is contested terrain. The cohort outcome is genuinely contested between creator and trader perspectives; OAK's editorial position is non-partisan as documented in the T12.003 Discussion section. The cohort case documents the policy realignment without prescribing a position on whether the outcome was a market-resolution-of-an-ambiguous-prior-policy or a coordinated defection from an established enforcement equilibrium.
  • Cross-marketplace volume distribution is the load-bearing analytical instrument. Defenders tracking royalty-revenue-durability for a given collection should monitor the share of the collection's trade volume settling through each marketplace contract on a recurring cadence. Migration of a high share to royalty-optional or customisable-royalty venues is the primary cohort-level antecedent of revenue loss for the creator. The metric is publishable; the practice was uneven across NFT-analytics platforms across the cohort window and remains a contributor target for v0.x improvement.

What this example tells contributors writing future Technique pages

  • T12.003 is structurally policy-ambiguous and should be documented non-partisan-ly. Future T12.003 contributions should preserve the policy-vs-attack framing rather than collapsing the Technique into a "zero-royalty-marketplaces-are-bad" narrative. The cohort outcome is genuinely contested; creators relying on royalty income face a real defender problem, but the marketplaces shipping royalty-optional trading are not necessarily attackers under any well-defined attack model. OAK documents the Technique because the defender problem is real, not because the attack model is settled.
  • Standard-vs-enforcement gaps are a Technique class, not just a T12.003 phenomenon. The X2Y2 + LooksRare cohort is the canonical NFT-side example, but the structural pattern — a standard that defines metadata and leaves enforcement to policy choice at the consuming layer — recurs across crypto infrastructure (token approval-revocation guidance vs marketplace enforcement, EIP-712 typed-data vs wallet-side display, et cetera). Contributors writing future standard-vs-enforcement-gap Techniques should reference the T12.003 framing as the canonical worked example.
  • Creator-side deployment-time decisions are a discrete defender practice and warrant explicit Mitigation entries. The choice between ERC-2981-only, Operator-Filter-Registry-opt-in, and ERC-721C-style enforcement is a deployment-time decision with material implications for revenue durability under future marketplace-policy changes. Contributors writing the v0.x Mitigation entries for T12.003 should consider an explicit creator-deployment-time-decision Mitigation that points back at this cohort and at the OpenSea sunset event as the dated marketplace-policy realignments creators must plan against.
  • Marketplace public communications are the load-bearing attribution anchor for marketplace-policy events. The X2Y2 and LooksRare royalty-optionality shifts are publicly attributed via official marketplace communications. Future T12.003 worked examples should treat marketplace-public-statements as the load-bearing attribution evidence at the policy-event layer, in contrast with the T12.001 and T12.002 surfaces where on-chain forensics and per-incident technical evidence are the primary attribution anchors.

Public references

  • [x2y2royaltyaugust2022] — X2Y2 official communications on the August 2022 royalty-optionality shift and the subsequent settlement at 0.5% recommended-minimum royalty.
  • [looksrareroyalty2022] — LooksRare communications on parallel royalty-policy adjustments through 2022.
  • [blurzeroroyalty2022] — Blur launch documentation; the third leg of the 2022 marketplace-policy realignment on Ethereum NFT royalty enforcement.
  • [openseaoperatorfilter2022] — OpenSea Operator Filter Registry launch and ownership transfer to the CORI multisig (the marketplace-policy response to the cohort).
  • [eip2981] — ERC-2981 NFT Royalty Standard text including the explicit standard-side note that taker-side payment is not bound.
  • [chainalysis2022nft] — primary NFT industry retrospective; cohort-scale framing for the broader Ethereum NFT marketplace volume mix across the cohort window.

Citations

  • [x2y2royaltyaugust2022] — X2Y2 royalty-optionality shift; primary marketplace-policy attribution.
  • [looksrareroyalty2022] — LooksRare parallel royalty-policy adjustments.
  • [blurzeroroyalty2022] — Blur launch documentation; cohort context.
  • [openseaoperatorfilter2022] — OpenSea Operator Filter Registry launch; cohort response.
  • [eip2981] — ERC-2981 standard text; structural antecedent.
  • [chainalysis2022nft] — primary NFT retrospective; cohort framing.

Discussion

The X2Y2 + LooksRare royalty-optionality cohort is OAK's canonical worked example for the marketplace-policy realignment that converted the ERC-2981 standard-vs-enforcement gap from a latent design choice into a material economic outcome on Ethereum. The case sits at the centre of T12.003 as the dated policy event that, alongside the Blur 2022-10-19 launch, made creator royalty income a contested rather than presumptively-enforced revenue model on the dominant chain.

The cohort framing reflects a structural observation about T12.003 that the Technique page makes explicitly: the Technique is structurally more "industry policy problem" than "exploit", and the OAK editorial position is non-partisan. The X2Y2 communications framed the policy shift as trader-flexibility; the creator-side response framed it as a coordinated defection from an established enforcement equilibrium. Both framings are coherent within their respective premise sets, and OAK documents the case because the defensive question for creators is real regardless of how the underlying policy debate is resolved. Worked examples written in the T12.003 surface should preserve this non-partisan framing.

The case carries additional analytical weight as the dated antecedent to the OpenSea Operator Filter Registry response (November 2022 launch, August 2023 sunset announcement, February 2024 grace-period end) documented separately at examples/2023-08-opensea-operator-filter-sunset.md. Together, the X2Y2 + LooksRare cohort and the Operator Filter Registry sunset bracket the 2022–2024 Ethereum NFT marketplace-policy realignment on royalty enforcement: the X2Y2 + LooksRare event is the policy-defection antecedent, the Operator Filter Registry launch is the creator-side enforcement response, and the sunset is the policy-defection completion. Contributors writing future T12.003 examples should preserve this trajectory as the load-bearing structural framing.

For OAK's broader credibility, including the X2Y2 + LooksRare cohort in v0.1 closes a gap in the T12.003 worked-example set — without it, T12.003 had only the Technique-page-level cohort framing and no dated incidents to anchor the policy-realignment timeline against. The cohort case demonstrates that T12.003 has a real public record at the marketplace-policy event layer and that the Technique class generalises across multiple marketplace operators on the same chain in adjacent windows. The next contribution target for T12.003 is per-collection effective-royalty-rate worked examples — collections whose specific revenue-durability story across the cohort window is documented in public NFT-analytics output — and contributors with those examples are encouraged to submit them via PR.

Techniques demonstrated (1)