NFT Risk Uncovered: $6M Worth of Assets Left Exposed After Marketplace Shutdown

Nearly $6 million worth of NFTs were put at risk after a vulnerability in Limit Break's Payment Processor V2 service was left exposed due to Magic Eden's decision to shut down its EVM marketplace. The platform had previously granted trading approvals, but continued to pose a risk even after the service was no longer in use.

The issue affected NFTs listed between February and October 2024, with 23,155 of them being recovered through a white-hat operation. Payment Processor V2 was not shut down due to its complexity, allowing attackers to potentially exploit it before the recovery team could act.

Magic Eden advised users to revoke their approvals for Payment Processor V2 on Ethereum, Polygon, and Base networks to prevent further risk. The affected NFTs included Meebits, Otherdeeds, World of Women, and Desperate ApeWives, with some assets being stolen by attackers.