Magic Eden Legacy Approvals Exposed $5.7M Worth of NFTs to Exploitation

Legacy approvals from Magic Eden's former EVM marketplace left thousands of NFTs vulnerable to exploitation in Limit Break's Payment Processor V2. The marketplace shut down in October 2024, but users who interacted with it still had active permissions.

An attacker exploited the vulnerability this week, putting over $5.7 million worth of assets at risk. A whitehat rescue operation saved 23,155 NFTs before they could be stolen.

Magic Eden says no live listings were affected, but users who interacted with its EVM marketplace during the affected period should revoke lingering approvals for Payment Processor V2 on supported networks including Ethereum, Polygon, and Base.