Security researchers have successfully recovered 23,155 NFTs valued at over $5.7 million following an exploit in the Limit Break Payment Processor V2. The vulnerability allowed unauthorized access to digital assets, prompting a whitehat rescue operation led by Yuga Labs blockchain vice president 0xQuit.
The initial attack targeted 10 Meebits, 50 Otherdeeds, 10 World of Women NFTs, and 235 Desperate ApeWives. Researchers later identified that a significantly larger number of NFTs were vulnerable to the same flaw. While Limit Break paused its V3 processor, the V2 version could not be halted, necessitating the manual migration of assets.
A similar security issue was identified on ApeChain, affecting assets approved to the V3 processor. Additionally, a related exploit put 660 WETH at risk, which remains unrecovered. Magic Eden confirmed that while its live listings were unaffected, assets listed on its EVM marketplace between February and October 2024 may still be exposed.
Magic Eden ceased using the Payment Processor V2 in October 2024 and closed its EVM marketplace in the first quarter of 2026. The platform has advised users to revoke any outstanding permissions granted to the affected contracts to prevent further potential unauthorized access to their digital assets.
