zero-day offered for sale via NFT auctionHappened on March 9th, 2021
A zero-day exploit is an exploit that takes advantage of a vulnerability that hasn't previously been identified. Once a zero-day exploit is revealed, it’s basically a race between those who want to exploit it and those who want to patch the affected system. The listing, on the OpenSea NFT marketplace, advertised the token as a “post-authentication memory corruption vulnerability in ioquake3 engine. The issue can be exploited to cause a denial-of-service condition, code execution has been deemed unlikely. This issue has been tested on OpenArena, but should be present in all 28 games using the idTech3 (ioquake3) engine.” OpenSea took down the auction and listing after it was posted.