OAK — OnChain Attack Knowledge

Worked example · 2026

NFT marketplace wash-trade and fake-mint cohort — 2026 Q1

Loss
Per-victim loss, not a single-incident total. NFT marketplace wash trading and counterfeit-collection minting continued through 2026 Q1 across major multi-chain NFT venues (Blur, OpenSea, Magic Eden, Tensor), with automated wash-trade bots cycling NFT listings through controlled wallets to inflate collection-level volume metrics and capture marketplace reward incentives. Fake NFT mints impersonating high-profile collections (Pudgy Penguins, Bored Ape Yacht Club, DeGods) on secondary marketplaces continued as the dominant T12.002 sub-pattern.
OAK Techniques observed
OAK-T12.001 (NFT Wash Trade Volume Inflation) — wash-trade bots cycling NFTs between controlled wallets to inflate volume metrics and capture Blur farmer incentives. OAK-T12.002 (Fake Mint Counterfeit Collection) — counterfeit collections impersonating verified high-profile brands on OpenSea/Magic Eden/Tensor. OAK-T1.005 (Hidden Fee on Transfer) — some counterfeit collections embedded hidden royalty/fee hooks.
Attribution
pseudonymous — wash-trade bot operators and counterfeit collection deployers operate under pseudonymous wallet addresses.
Key teaching point
NFT marketplace reward mechanisms (Blur points, Tensor rewards, Magic Eden Diamonds) create an economic incentive for wash trading that is structurally analogous to CEX volume-inflation schemes. The marketplace's volume-based reward mechanism is the incentive; the wash-trade bot is the execution; the inflated collection metrics are the harm to genuine traders who rely on volume-as-signal for collection quality assessment.

Summary

Through 2026 Q1, NFT marketplace wash trading remained the dominant T12.001 sub-pattern: operators deployed automated bots that cycled NFT listings between controlled wallets via marketplace listing-and-bid loops, inflating per-collection volume metrics to capture marketplace reward incentives (Blur farmer points, Tensor reward distributions, Magic Eden Diamonds).

The wash-trade surface is structurally enabled by the marketplace reward mechanism design: when volume-based rewards exceed transaction costs (gas + marketplace fee + royalty), the rational-actor response is volume inflation via wash trading. The detection signal is the wallet-address clustering that reveals controlled-wallet cycles — addresses that repeatedly bid on and accept bids from the same counterparty set with no external trading activity.

Counterfeit collection minting (T12.002) continued through 2026 Q1, with attackers deploying NFT collections whose metadata, artwork, and collection naming impersonated verified high-profile collections. The counterfeit collections targeted secondary-marketplace search indexing: a user searching for "Pudgy Penguins" on OpenSea or Magic Eden would see the counterfeit collection adjacent to the verified original. Some counterfeit collections embedded hidden fee hooks (T1.005) that routed secondary-sale proceeds to attacker-controlled addresses.

Public references

  • Dune Analytics: NFT marketplace wash-trade volume dashboards (2025-2026).
  • NFT marketplace (Blur, OpenSea, Magic Eden, Tensor) reward mechanism documentation.
  • On-chain NFT marketplace transaction tracing: controlled-wallet wash-trade cycle detection.

Techniques demonstrated (3)