Somebody getting scammed out of 700K worth of NFTs by a malicious contract is not some flaw in the system that inhibits mass adoption, it's extremely negligent user error by a person who has brazenly ignored all security advice.

The guy who just had 700K of NFTs stolen had to specifically approve and sign a blind transaction which gave a phishing website access to all of his NFTs. The top comment on that thread is making fun of us being near adoption, because how could this happen.

In many cases when approving contracts there's a specific warning about what your contract approval allows (e.g. signing a contract on Metamask via OS says 'You will give access to all your NFTs').

He could have avoided this in 500 different ways. It's so many concurrent fuckups on his part.

​

• He kept 700K worth of NFTs on a single wallet address, which appears to have been a hot wallet. A fucking hot wallet with 700K NFTs. He referred to this as 'losing everything'.
• IF it wasn't a hot wallet, then he had to enable blind signing and chose to connect his primary ETH cold wallet address to a smart contract. This is breaking such basic, basic security.
• This guy had to approve an unlimited contract from a malicious website. He didn't just connect his wallet and lose his funds, he had to specifically sign an agreement to allow the provider to do *whatever the fuck they wanted*. If it didn't come up saying that, he approved a transaction he didn't understand that allowed them to do *whatever the fuck they wanted*.
• The link in question was a phishing site, which could have been easily dealt with via simple google query.
• There are a million ways to adopt crypto without taking on the responsibility of self custody. The entire concept of Crypto is allowing self ownership and self responsibility. If people don't want that aspect then they can engage with the other benefits of crypto in more user friendly ways.

This isn't a fault with adoption, it's user error.

We don't say 'oh mass adoption is imminent tee hee' with the billions of dollars scammed from the elderly world wide from traditional banks each year.

When somebodies house gets broken into because they left the door open we don't go 'personal property is dead'.

We don't say it with the hundreds of millions of dollars scammed from instant payment providers like Venmo.

We don't say it when PayPal decline a case, or somebody gets off scot free sending a box of rocks instead of an expensive item.

The rules in crypto may be different, but they are rules, and they're pretty simple to follow.