If you listed an NFT, placed an offer or accepted one on Magic Eden's former Ethereum marketplace in 2024, you need to act now. A bug in Limit Break's Payment Processor, the trading protocol behind that marketplace, has been used since Thursday to pull NFTs and Wrapped Ether (WETH) out of other people's wallets. On ApeChain, Wrapped ApeCoin (WAPE) was hit. Our own analysis of the blockchain shows 530.7 WETH gone from 911 wallets, plus thousands of NFTs, and at our last check at 12:40 UTC the drain was still running.
Protecting yourself takes minutes: you revoke the approvals for two contracts. Cancelling a listing is not enough. And a hardware wallet does not protect you here. We explain why in detail below, because it is being misrepresented in many replies on X right now.
Magic Eden and Limit Break: the two approvals you need to revoke now
Two contracts are affected. Quit, VP of Blockchain at Yuga Labs, named them publicly on Friday morning:
- Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
- Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366
Magic Eden also names Polygon and Base, be...
English (US)