Whitehats Move 3,832 NFTs Amid Magic Eden Payment Contract Vulnerability

iconAMBCrypto
Share
This is the logo of the coin.
NFT
$0.0₆24160.49%
AI summary iconSummary
Vulnerability news emerged as whitehats moved 3,832 NFTs to a secure wallet after a flaw was found in an old Magic Eden payment contract. The affected NFTs were listed on Magic Eden’s EVM marketplace between February and October 2024. The issue traced back to Limit Break’s Payment Processor V2, which Magic Eden stopped using in October 2024 and fully shut down in Q1 2026. On-chain news shows users are being urged to revoke old approvals if they traded during the affected period.

Thousands of NFTs just got pulled out of harm’s way by whitehats… all because of a bug in an old payment contract.

Here’s what happened!

Whitehats move 3,832 NFTs after Magic Eden bug scare

Each of these transfers looked like regular sales on Magic Eden. This was part of the reason why people got worried. In fact, NFT community member Cirrus pointed this out too, which is why he told holders to revoke their approvals. Just in case.

AD
NFT
Source: X

However, it was all just a rescue move.

Yuga Labs’ VP of Blockchain, who goes by 0xQuit on X, revealed that the transfers were part of a whitehat operation. The NFTs are safe in the receiving wallet and will go back to their owners once the risk is gone.

NFT
Source: X

The vulnerability was found just a few hours prior to this operation.

For context, this wasn’t 0xQuit’s first rescue either. In June, he helped recover 68 NFTs worth over $500,000 after the Flooring Protocol exploit.

Only listings from February to October 2024 at risk

In the time since, Magic Eden has released an interim statement.

According to ME, the problem was with the Limit Break’s Payment Processor V2, and not the marketplace itself. But, what is that? That’s what the NFT trading protocol Magic Eden started using in 2024 to settle trades on EVM chains.

They dropped the contract in October 2024 and shut its EVM marketplace completely in Q1 2026.

No live Magic Eden listings were impacted in this exploit.

Here, it’s worth noting that NFTs listed on Magic Eden EVM between February and October 2024 could still be vulnerable. Anything listed after that should be alright.

We are still further refining our investigation and will provide more updates…

They’ve also reached out to Limit Break (which owns and maintains the protocol) to see what else can be done, like pausing transfers.

If you traded there during that window, revoking your old approvals is a smart move right now.

Final Summary

  • After a bug was found, whitehats moved 3,832 NFTs to a safe wallet.
  • Magic Eden announced that NFTs listed on its EVM marketplace between February and October 2024 could be at risk.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.