Whitehats Rescue $5.7M in Stolen NFTs from Limit Break Exploit

A security bug in Limit Break's Payment Processor V2 allowed hackers to steal NFTs worth over $5.7 million, but whitehat researchers were able to rescue the affected assets.

According to Quit, a pseudonymous vice president of blockchain at Yuga Labs, the exploit initially targeted 10 Meebits, 50 Otherdeeds, 10 World of Women NFTs, and 235 Desperate ApeWives. However, researchers soon discovered that many more NFTs were vulnerable to the same attack.

Limit Break quickly paused Payment Processor V3 after being alerted, but V2 could not be paused, requiring a whitehat operation to move affected assets to safety. A similar vulnerability was also found on ApeChain, where some assets approved for V3 needed to be secured.