---
id: 5333
title: "How to hack into NFT marketplace"
source_domain: hackenproof.com
source_url: "https://hackenproof.com/blog/how-to-hack-into-nft-marketplace"
published_at: "2026-06-11 10:27"
tags: ["bug-bounty", "web3", "web-security", "xss", "session-hijacking", "waf-bypass", "nft"]
phying_url: "https://phying.com/item/5333"
lang: en
---

# How to hack into NFT marketplace

## Summary

A walkthrough of attacks on NFT marketplaces: uploading a JavaScript-laced SVG as an NFT, bypassing WAFs via origin IPs, and capturing session cookies when marketplaces render user content.

## Intelligence Metadata

- **Sources:** hackenproof.com
- **Published:** 2026-06-11 10:27
- **Original:** https://hackenproof.com/blog/how-to-hack-into-nft-marketplace
- **Phying News:** https://phying.com/item/5333
