Current outcome
In the Magic Eden-related approvals security incident, Magic Eden warned that NFTs listed on its closed EVM marketplace (February–October 2024) were exposed to a Limit Break Payment Processor V2 exploit; a whitehat operation rescued 23,155 NFTs worth more than $5.7 million, but 660 WETH was not recovered; the attacker stole specified NFTs; Limit Break paused the similarly flawed V3 while V2 could not be paused; holders are still urged to revoke vulnerable approvals on Ethereum, Polygon, and Base.
Progress timeline
3 material updates- #01
Magic Eden scare puts 3,832 NFTs in whitehat protective custody
A whitehat operation moved 3,832 NFTs from hundreds of wallets into protective custody amid concerns over a vulnerability tied to Magic Eden, with holders advised to revoke NFT permissions while the NFTs are held pending resolution.
Source evidence: Cointelegraph
- #02
Legacy Magic Eden Approvals Exploited as White Hats Rescue NFTs
White hats secured 23,155 NFTs worth more than $5.7 million, up from the 3,832 previously reported; the incident is described as exploits of legacy Magic Eden approvals, and holders still need to revoke vulnerable NFT and token approvals.
State after update: In the Magic Eden-related approvals security incident, a whitehat operation has secured 23,155 NFTs worth more than $5.7 million; holders are still required to revoke vulnerable NFT and token approvals.
Source evidence: The Defiant
- #03
Magic Eden Warns Old Ethereum NFT Listings Are Exposed to Payment Processor Exploit
The new report reveals the exploit stemmed from Limit Break's Payment Processor V2 and affected NFTs listed on Magic Eden's EVM marketplace between roughly February and October 2024; beyond the 23,155 NFTs rescued, 660 WETH was not recovered; the attacker stole 10 Meebits, 50 Otherdeeds, 10 World of Women, and 235 Desperate ApeWives; Limit Break paused the similarly flawed V3, but V2 could not be paused; users are advised to revoke contract approvals on Ethereum, Polygon, and Base.
State after update: In the Magic Eden-related approvals security incident, Magic Eden warned that NFTs listed on its closed EVM marketplace (February–October 2024) were exposed to a Limit Break Payment Processor V2 exploit; a whitehat operation rescued 23,155 NFTs worth more than $5.7 million, but 660 WETH was not recovered; the attacker stole specified NFTs; Limit Break paused the similarly flawed V3 while V2 could not be paused; holders are still urged to revoke vulnerable approvals on Ethereum, Polygon, and Base.
Source evidence: Decrypt