Magic Eden Users Warned of Exploit in Old Ethereum Listings

Users of Magic Eden's old Ethereum (EVM) marketplace have been warned that their NFTs may be exposed to an exploit in Limit Break's Payment Processor V2. The issue affects NFTs listed on the EVM marketplace between February and October 2024.

Magic Eden, which stopped using the contract in October 2024 and shut down its EVM marketplace in early 2026, warned users to revoke the V2 contract's 'approved for all' permissions on Ethereum, Polygon, and Base. Revoking these permissions won't return tokens that have already moved.

A recent bug in Payment Processor V2 was exploited by an attacker who stole NFTs worth millions of dollars. A whitehat operation rescued 23,155 NFTs worth over $5.7 million, but 660 wrapped Ethereum (WETH) couldn't be recovered in time.