Magic Eden Legacy Approvals Expose Millions in Vulnerable NFTs

A recent exploit affecting Limit Break's Payment Processor V2 has left $5.7 million in NFTs exposed, according to Magic Eden.

The vulnerability allowed an attacker to target NFTs whose owners had previously approved the payment processor, with assets stolen including 10 Meebits, 50 Otherdeeds, and 235 Desperate ApeWives.

A whitehat operation rescued 23,155 NFTs worth over $5.7 million before further theft, but 660 WETH tied to a related exploit remained unrecovered.

Magic Eden advises users who listed NFTs on its EVM marketplace between February and October 2024 to revoke Payment Processor V2 approvals on Ethereum, Polygon, and Base before reclaimed assets can safely return to their wallets.