Safe Rendering: Protect your users from malicious NFTs

Never again worry about serving malicious NFT media to your users with Center's next-gen renderer.

By Center 3 min read

We're pleased to announce that our V2 renderer supports "Safe Rendering", which enables our users to remove malicious elements from NFT media before showing them in their applications.

Malicious NFTs have unfortunately become an attack vector for hackers looking to drain wallets. The precise attack can vary – but often take the form of a surprise airdrop. When users view the airdropped NFT, the NFT media triggers a pop-up prompting users to connect their wallet. If granted, hackers drain the user's wallet.

These types of attacks can be major problems for applications that allow users to view NFT media. With the Center API V2, you can now protect your users from these attacks.

With Center's next-generation renderer (part of our new V2 API), you can render NFTs in "safe mode":

With the Center V2 Renderer, users can specify precise file types before rendering (.png, .jpg and .gif). The Center Renderer will rasterize the media to convert it to the desired file type, which will remove any malicious elements so that users are protected.

Making this change is as easy as adding the desired extension to the end of your API request!

This request will render the original media as it exists on-chain:

https://api.center.dev/v2/ethereum-mainnet/{NFTAddress}/nft/{tokenId}/render/original

This request will convert the media to a .jpg file (see ".jpg" at the end of the request), removing any malicious elements in the process:

https://api.center.dev/v2/ethereum-mainnet/{NFTAddress}/nft/{tokenId}/render/original.jpg

This works for .jpg, .png and .gif! Check out how easy it is to transform media to different file types:

0:00
/
An example (with a non-malicious NFT!) showing the conversion of an SVG file to a JPG and PNG

Want to add Safe Rendering to your application?

Building an NFT-related application may seem daunting, but our APIs can help abstract away complex infrastructure details so you can focus on what matters to your users.

We already support a wide variety of applications, including NFT marketplaces, wallets, data intelligence tools and portfolio trackers.

Ready to get started?

Need help or want more information?

About Center

The Center API is a multi-chain, high-performance NFT API designed with speed and developer productivity in mind. Our seasoned team has working experience at Coinbase, WhatsApp, Facebook, Google, Square and Paradigm. We’ve led teams and built products where scalability, performance, and security are paramount — and we bring that mindset to everything we build.

To date, Center has indexed over 150TB of NFTs across 14 chains. We offer a a 99.999% uptime SLA and support users ranging from individual hackers to large enterprises.

Our APIs also power center.app, an NFT search engine that we are building. We encourage you to check it out!

What is an NFT API?

https://storage.googleapis.com/center-inc-blog-media/public/media/2022-07-09-api.jpg

Building NFT-related applications from scratch is complicated. It might require indexing multiple chains, ingesting vast quantities of data, and meticulously building low-level infrastructure to ensure all of the data is processed correctly. This could take engineers months to get right before they even start building an application.

Our APIs allow builders to abstract away this complexity and focus on building useful products for end users right away— we take care of the infrastructure and low-level technical details. With just a few lines of code, builders can use our APIs for a range of use cases including NFT rendering, search and data retrieval.

Our Investors

https://storage.googleapis.com/center-inc-blog-media/public/media/2022-07-09-one.png

Our Team

https://storage.googleapis.com/center-inc-blog-media/public/media/2022-07-09-two.png