Magic Eden Exploit Drains 530 WETH, Thousands of NFTs in Limit Break Bug
A recent exploit targeting Magic Eden and Limit Break has resulted in significant losses for several users. The incident began on September 24, when a single address pulled 305 NFTs out of a wallet through Limit Break's Payment Processor, which was used by Magic Eden's former Ethereum marketplace.
The attackers continued to use the same bug to drain WETH and other tokens from thousands of wallets until at least September 25. According to blockchain analysis, 911 affected wallets lost a total of 530.7 WETH, along with thousands of NFTs.
To protect themselves, users must revoke two specific approvals for contracts linked to the Payment Processor on both Ethereum and ApeChain. Quit, VP of Blockchain at Yuga Labs, publicly called on users to take this step on September 25.