Skip to main content

Magic Eden Says Legacy Approvals Exposed $5.7M In NFTs To Exploit

TL;DR

  • Magic Eden says old EVM marketplace approvals left more than $5.7 million worth of NFTs exposed to an exploit in Limit Break’s Payment Processor V2.
  • A whitehat rescue operation moved 23,155 vulnerable NFTs before they could be stolen.
  • Magic Eden says no live listings were affected, but users who interacted with the old marketplace should revoke lingering approvals.

An old smart contract can remain dangerous long after the product built around it has disappeared.

Magic Eden is dealing with exactly that problem after legacy approvals from its former EVM marketplace left thousands of NFTs exposed to a vulnerability in Limit Break’s Payment Processor V2.

The marketplace says more than $5.7 million worth of NFTs were at risk.

The Marketplace Was Closed, But The Approvals Were Still Live

Magic Eden stopped using Payment Processor V2 in October 2024 and later shut down its EVM marketplace.

That did not automatically revoke permissions users had previously granted to the contract.

When an attacker exploited the processor this week, those old approvals became relevant again.

The initial theft included assets from collections such as Meebits, Otherdeeds and World of Women.

Security researchers then realized a much larger number of wallets remained exposed.

A whitehat rescue operation ultimately secured 23,155 NFTs worth more than $5.7 million before they could be taken.

Users are expected to reclaim rescued assets after revoking the vulnerable approval.

Magic Eden says no active listings on its current products were affected.

Token Approvals Can Outlive The App That Asked For Them

The incident is a useful reminder of how wallet permissions work.

When a user gives a marketplace or protocol permission to transfer assets, that authorization can remain valid until it is explicitly revoked.

Closing a website does not necessarily remove it.

Changing marketplaces does not necessarily remove it.

Even abandoning a wallet interface does not alter what has already been approved onchain.

Magic Eden says users who interacted with its EVM marketplace during the affected period should revoke Payment Processor V2 permissions on supported networks including Ethereum, Polygon and Base.

Researchers also identified a related route that placed hundreds of WETH at risk, showing that the vulnerability was not limited to NFTs.

The technical exploit sits inside Limit Break’s processor rather than Magic Eden’s live marketplace.

But old Magic Eden approvals dramatically expanded the number of users potentially exposed.

Crypto security often focuses on what somebody is signing today.

This incident shows why the permissions granted years ago can matter just as much.

This article was written by the News Desk and edited by Samuel Rae.



from Bitcoinist.com https://ift.tt/hcP7niJ

Comments

Popular posts from this blog

Coinbase Adds Wormhole To Spot Trading As Solana Infrastructure Tokens Gain Visibility

Coinbase listings still matter, even in a market that likes to pretend every token is already globally accessible. The exchange ’s decision to add Wormhole puts another major infrastructure name in front of a much broader pool of traders. That matters because Wormhole is not just another speculative ticker. It sits inside one of crypto’s most important, and most debated, categories: cross-chain connectivity. For more details, visit the official Coinbase platform. TL;DR Coinbase is adding support for Wormhole’s W token on spot markets. The listing gives a higher-profile venue to a token tied to cross-chain infrastructure. It also keeps Solana ecosystem names in front of mainstream exchange users. Why A Wormhole Listing Is Interesting Bridge and messaging infrastructure often do not get the same retail attention as consumer-facing protocols, but they matter enormously to how liquidity and applications move between ecosystems. Coinbase’s listing helps push t...

Ethereum On Exchanges Crashes To Historic Low Amid Market Volatility, A Bullish Signal For Price?

Ethereum saw a bounce back above the $3,000 price market , with bullish sentiment gaining momentum among investors, especially those on centralized exchanges. Even with the market experiencing sideways movements, the overall supply of ETH on crypto exchanges has fallen sharply, hitting unprecedented levels. Lowest Supply Of Ethereum On Exchanges Recent signals from on-chain metrics indicate that the Ethereum market environment is undergoing a quiet yet significant transformation. This unfolding trend is due to the sharp drop in the supply of ETH available on cryptocurrency exchanges. Related Reading: Ethereum Network Fatigue? Monthly On-Chain Transactions Drops As Activity Slows Down As reported by Coin Bureau on the social media platform X, ETH supply on centralized exchanges has hit levels not seen in years. With more holders choosing long-term storage, staking, and self-custody over keeping their assets available for trade, this significant supply drain indicates a change in i...

Bitcoin Remains Range-Bound As Volatility Declines – Analyst Explains Price Action

Bitcoin has experienced frustrating price action in recent weeks, leaving investors impatient about its short-term direction. The price has been testing crucial supply levels between $98K and $100K, struggling to break out as uncertainty dominates the market. The lack of a clear move has led to speculation about whether BTC is preparing for a breakout or another correction. Adding to the uncertainty, the market was hit by negative news on Friday when crypto exchange Bybit was hacked, resulting in the theft of $1.4 billion in ETH. The incident caused fear and volatility, briefly dragging prices lower. However, Bybit responded quickly to reassure investors, easing some of the initial panic and stabilizing the market. Despite this, Bitcoin continues to consolidate in a tight range. Crypto expert Daan shared an analysis on X, noting that BTC is still ranging while volatility is steadily decreasing. As price compression increases, traders are on high alert for a potential explosive move....