All news
Stocks
Crypto
Economics
Currencies
Commodities
Business & Wealth
Market Voices
A previously used approval setup on Magic Eden’s EVM marketplace leaves certain NFT listings from 2024 vulnerable to a smart contract exploit. The issue affects assets tied to Limit Break’s Payment Processor V2, while users who revoke old approvals can later reclaim NFTs recovered in a whitehat rescue.
Highlights
- Magic Eden discloses that legacy approvals tied to Limit Break’s Payment Processor V2 exposed over $5.7 million in NFTs to exploit risk after discontinuing use in October 2024.
- A whitehat rescue operation recovers 23,155 NFTs, including Meebits, Otherdeeds, World of Women, and Desperate ApeWives, following an attack; Payment Processor V2 remains unpauseable.
- 660 WETH remains at risk due to a related exploit not fully covered by the recovery operation, with users advised to revoke Payment Processor V2 approvals on Ethereum, Polygon, and Base.
Exposure window and rescue operation
As citing Magic Eden in an X post on Friday, the exposure stems from legacy approvals on its EVM marketplace tied to Limit Break’s Payment Processor V2. The company says it stopped using that processor in October 2024 and shut down its EVM marketplace in the first quarter of 2026, adding that no live Magic Eden listings are impacted
The vulnerability comes to light after an attacker exploits the processor to steal 10 Meebits, 50 Otherdeeds, 10 World of Women NFTs and 235 Desperate ApeWives, according to Yuga Labs Vice President of Blockchain 0xQuit. He says Limit Break quickly pauses Payment Processor V3, which is affected by the same bug, but V2 cannot be paused.
That makes a whitehat operation the main available route to protect exposed assets. According to 0xQuit, the rescue operation recovers 23,155 NFTs worth more than $5.7 million.
User actions and remaining losses
Magic Eden says NFTs listed on its EVM marketplace between roughly February and October 2024 may be affected. The platform advises users to revoke Payment Processor V2 approvals on Ethereum, Polygon and Base.
The recovery effort does not extend to all assets exposed through related approval paths. In a separate X post, 0xQuit says a similar exploit can also be used in reverse to steal WETH, and 660 WETH is at risk that the team is not fast enough to recover.
Users who revoke the exploitable approvals will be able to reclaim rescued NFTs afterward
Our earlier article on U.S. prosecutors freezing about $84 million linked to payments group Capstone outlined allegations of unlicensed money transmission and the resulting disruption to crypto-related banking access. We noted how the case amplified scrutiny of intermediaries used to move funds and highlighted the knock-on effects for firms seeking reliable payment rails, including liquidity strains for EQIBank and ongoing banking access challenges for major crypto players.
This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.
Did you like the article?
Thank you for your feedback!
What could we improve?
Latest Polygon News
<img src="https://tradersunion.com/uploads/images/tu-news/02026/09/3500988/small/polygon-boosts-agent-payments_small.jpg” alt=”Polygon boosts AI agent payments to 11 million operations per second”>
- By Andrey Mastykin
- 6 hours ago
Polygon boosts AI agent payments to 11 million operations per secondCrypto
#AI#Polygon
- By Igor Krasulya
- 12 hours ago
100 million POL tokens burned: Can Polygon extend gains?Crypto
#Forecast#Polygon
- By Viktoras Karapetjanc
- Yesterday
Polygon technical analysis: $0.0985 support test in focusCrypto
#Forecast#Polygon
All Polygon News
- Anastasiia Chabaniuk
- 8 hours ago
From Bitget to Bybit: 5 biggest crypto exchange hacks
- Mikhail Vnuchkov
- 12 hours ago
Crypto adoption ranking: How Brazil rose to the top globally
- Ksenia Gerey
- Yesterday
Meta’s new VR glasses: Is the metaverse getting a second chance?
- Eugene Komchuk
- Yesterday
Wall Street has the S&P 500. What do crypto traders have?
- Olena Litvinenko
- 23.09.2026
From BUSD to USDC: Why Binance changed its stablecoin strategy
- Alena Volkova
- 1 min ago
Shielded Bitcoin team makes notable progress, Muneeb Ali notes
- Mykhailo Ihnatenko
- 6 min ago
Markets seen oversold and entering stronger period, Stephanie Link expects
- Yaroslav Dmytrenko
- 6 min ago
Bonds and equity market trends discussed, Rebecca Walser notes
- Mikhail Vnuchkov
- 16 min ago
Jon Steinsson: AI infrastructure buildout could require $10.3 trillion investment by 2032
- Daria Chernytska
- 16 min ago
Michael A. Gayed: FMKT ETF offers exposure to firms benefiting from streamlined regulations
Top News
- Iryna Sazhynska
- 7 hours ago
Meta market cap nears $2 trillion after shares surge 36% in a month
- Eugene Komchuk
- 10 hours ago
Nanexa shares jump 150% after deal with Ozempic maker
- Oleg Tkachenko
- 11 hours ago
Jack Dorsey’s company adds instant BTC payments for AI agents
- Pavlo Kot
- 13 hours ago
U.S. Treasury yields retreat from multi-year highs as oil prices fall
- Olga Shendetskaya
- 14 hours ago
U.S. ready to lift blockade on Iran in exchange for reopening Strait of Hormuz
- Andrey Mastykin
- Now
Polygon boosts AI agent payments to 11 million operations per second
- Kyle Torpey
- Now
KelpDAO sues LayerZero over $292 million hack
- Anton Kharitonov
- Now
EUR/USD pressured by stronger U.S. data and rising Treasury yields
- Jose Antonio Gastelum
- Now
Cathie Wood taps Securitize to tokenize $1.3 billion ARK fund
- Darina Pashchenko
- Now
BitMEX introduces fees for funds remaining on the platform
