Magic Eden Warns Older NFT Listings Still Vulnerable to Exploit
Magic Eden has warned users that older Ethereum NFT listings may still be vulnerable to an exploit in Limit Break's Payment Processor V2. The marketplace stopped using the contract, but users who listed their assets between February and October 2024 may have granted 'approved for all' permissions, allowing the contract to transfer NFTs from a wallet.
Magic Eden has urged users to revoke these approvals on Ethereum, Polygon, and Base, as revocation cannot recover assets that have already been moved. The company notes that canceling a listing or closing a marketplace does not automatically remove this permission.
A recent whitehat operation was able to move 23,155 NFTs valued at over $5.7 million to safety, but unfortunately could not recover $660 WETH due to being 'not fast enough.'