Magic Eden said legacy EVM approvals left more than $5.7M worth of NFTs exposed to an exploit in Limit Break’s Payment Processor V2, despite the marketplace no longer using the processor since October 2024.

A whitehat operation rescued 23,155 NFTs worth over $5.7M, while 660 WETH was also exposed but could not be recovered. The affected NFTs were listed on Magic Eden’s EVM marketplace between roughly February and October 2024.

The vulnerability was used to steal 10 Meebits, 50 Otherdeeds, 10 World of Women NFTs and 235 Desperate ApeWives. Magic Eden said no live listings were impacted and advised affected users to revoke Payment Processor V2 approvals on Ethereum, Polygon and Base before reclaiming rescued NFTs.

Partner Offers | Get Your Instant BTC Cashback | Your Gateway To Crypto | Arcus Private Whitelist