Ostrich Blockchain February 5, 2PMFLOW.ETH, co-founder of the NFT project Azuki, tweeted that he noticed a recent issue on OpenSea where someone was able to use a variable proxyRegistryAddress to become whitelisted for NFT contracts. For those of you who are minting NFT, you need to be aware of the risks involved, as anyone with the contract owner's key can transfer your tokens to any wallet address they want without your approval. 2PMFLOW.ETH revealed that they have noticed this problem with some upcoming NFT projects. A more secure alternative that supports the OpenSea whitelist is actually very simple, just set the Opensea proxyRegistryAddress in the constructor and make it immutable, and the operation takes as little as 2 minutes to deploy.