Whitehats move 23,155 NFTs from Limit Break processor exploit; 660 WETH left behind
A whitehat operation moved 23,155 NFTs worth over $5.7M out of wallets that still approved Limit Break's Payment Processor V2; Magic Eden says $1.8M wETH was taken.
Read this event in português (Brasil), français, 日本語, 한국어, русский, Türkçe, 中文（中国）
Why it matters
The exploit turns marketplace shutdowns into unfinished business: closing a product does not cancel the onchain permissions users granted it, so any user who traded on Magic Eden's EVM marketplace still carried that exposure. Loss estimates still differ between sources and no one has published a final figure for what attackers took.
Where the sources disagree
Amount stolen by attackers
roughly $1.8 million in wETH extracted
Bitcoin Insider
660 WETH could not be recovered
Decrypt, Bitcoin.com News
how many NFTs, if any, malicious actors took is not established
CryptoSlate
Bitcoin Insider, citing Magic Eden, put the wETH taken at roughly $1.8 million, while Decrypt and Bitcoin.com both report 660 WETH that slipped through the rescue and Revoke.cash had not established how many NFTs malicious actors took.
Size of the first reported transfer cluster
23,155 NFTs rescued, worth more than $5.7 million
Decrypt, Bitcoin.com News, Bitcoinist
3,832 NFTs moved as zero ETH sales per the Revoke.cash notice
CryptoSlate, Bitcoin.com News
Decrypt and Bitcoin.com report a rescue of 23,155 NFTs while the Revoke.cash notice that day counted 3,832 NFTs, and Revoke.cash's figure is only transfers reported in that notice.
Date Magic Eden ended EVM marketplace support
Ethereum, Polygon and Base
Decrypt
Ethereum and ApeChain
CryptoSlate
CryptoSlate dates the end of EVM support to March 9, 2026 while Decrypt says the EVM marketplace was shut entirely in early 2026.
Figures that do not reconcile
Found by comparing the numbers in the reports automatically. They are differences, not yet confirmed to be about the same thing.
reported value
$5.7 million
Decrypt
$1 million
Crypto.News
Decrypt reports $5.7 million, Crypto.News reports $1 million (82% apart).
reported value
$5.7 million
Bitcoin.com News
$1 million
Crypto.News
Bitcoin.com News reports $5.7 million, Crypto.News reports $1 million (82% apart).
reported value
$1 million
Crypto.News
$5.7 million
Bitcoinist
Crypto.News reports $1 million, Bitcoinist reports $5.7 million (82% apart).
reported value
$1 million
Crypto.News
$5.7 million
Bitcoin Insider
Crypto.News reports $1 million, Bitcoin Insider reports $5.7 million (82% apart).
amount taken (exploit legacy)
$5.7
Bitcoinist
$1.8
Bitcoin Insider
Bitcoinist reports $5.7, Bitcoin Insider reports $1.8 (68% apart).
Key facts
A vulnerability in Limit Break's Payment Processor V2 let a whitehat operation move 23,155 NFTs valued at more than $5.7 million out of approved wallets.
23,155 NFTsDisputed figureReported by Decrypt
0xQuit, VP of Blockchain at Yuga Labs, said the assets in wallet 0x71cF are safe and will be returned once they are no longer at risk.
Reported by Bitcoin.com News
NFT tracker Cirrus alerted on Sept. 25 after 3,832 NFTs moved from hundreds of wallets into one address as apparent Magic Eden sales for 0 ETH.
3,832 NFTsDisputed figureReported by Bitcoin.com News
Magic Eden said NFTs listed on its EVM marketplace between roughly February and October 2024 could be exposed through the V2 contract's lingering approvals.
Reported by Decrypt
Magic Eden adopted Payment Processor V2 to settle trades in 2024, stopped using it that October and shut its EVM marketplace in early 2026.
Reported by Decrypt
Magic Eden said no live Magic Eden listings were impacted by the exploit.
Reported by Decrypt
Magic Eden urged users who listed or traded on its EVM marketplace to revoke the V2 contract's approvals on Ethereum, Polygon and Base via Revoke.cash, warning that revoking will not return tokens already moved.
Reported by Decrypt
About 660 WETH could not be recovered in the rescue, according to 0xQuit.
660 WETHDisputed figureReported by Decrypt
What happened
A flaw in Limit Break's Payment Processor V2 let anyone move NFTs from wallets that had never revoked the contract's permission, and a whitehat operation shifted 23,155 NFTs worth more than $5.7M out of those wallets before attackers reached them. Yuga Labs VP of Blockchain 0xQuit, whose address holds the rescued assets, said on Sept. 25 that everything in wallet 0x71cF is safe and will be returned once holders are no longer at risk. NFT tracker Cirrus raised the alarm first after seeing 3,832 NFTs moving into a single wallet as apparent Magic Eden sales priced at 0 ETH, which Revoke.cash later counted as transfers reported in its notice. Magic Eden said the exposure traces to listings on its EVM marketplace between roughly February and October 2024, when the marketplace settled trades through the V2 contract; it stopped using the contract that October and shut the EVM marketplace entirely in March 2026. Magic Eden states that no live listings were affected and that the old approvals, not the closed marketplace, are the live problem, so it told users to revoke the V2 permissions on Ethereum, Polygon and Base, noting that revoking does not return tokens already moved. Bitcoinist reported that the thefts touched collections including Meebits, Otherdeeds and World of Women, and Bitcoin Insider, citing Magic Eden, put the wETH loss at roughly $1.8M, while Decrypt and Bitcoin.com both report 660 WETH that could not be recovered, and Revoke.cash had not established how many NFTs malicious actors actually took.
How the story developed
- Update
Cirrus spots 3,832 NFTs moving into a single wallet as 0 ETH Magic Eden sales
The transfer cluster looked like theft onchain until 0xQuit identified the address as a whitehat rescue wallet.
- Official statement
Magic Eden warns about lingering V2 approvals and publishes recovery guidance
The marketplace said no live listings were affected and pointed users to Revoke.cash to revoke the contract's permissions on Ethereum, Polygon and Base.
- Update
0xQuit says the rescue covers 23,155 NFTs worth more than $5.7 million
0xQuit said everything in wallet 0x71cF is safe and will be returned once holders are no longer at risk, and that 660 WETH slipped through.
- Update
Revoke.cash notice draws a second count of exposed transfers
The wallet security service reported 3,832 NFTs moved as zero ETH sales and said it could not determine how many NFTs attackers actually took.
- First report
First report by Decrypt
Magic Eden Warns Old Ethereum NFT Listings Are Exposed to Payment Processor Exploit
- Independent corroboration
Independently corroborated by CryptoSlate
Old Magic Eden NFT approvals put users at risk after whitehat moves 3,832 NFTs
- Official statement
Official statement from Bitcoin.com News
White Hats Swipe $5.7M in NFTs Before Attackers Get Their Shot
- Update
Magic Eden confirms roughly $1.8 million in wETH was extracted
Bitcoin Insider, citing the marketplace, put the wETH loss at about $1.8 million and said eligible users can now check whether their assets were part of the rescue.
- Update
Bitcoinist names the collections hit in the initial theft
Collections including Meebits, Otherdeeds and World of Women were listed among the assets taken.
How coverage built up
Independent sources over time, counted the way the consensus panel counts them: a republication of a wire story does not move the line.
- 25 Sept 2026, 16:17 UTC: Decrypt — 1 independent source, 1 reports
- 25 Sept 2026, 18:00 UTC: CryptoSlate — 2 independent sources, 2 reports
- 25 Sept 2026, 19:10 UTC: Bitcoin.com News, official — 3 independent sources, 3 reports
- 26 Sept 2026, 06:36 UTC: Crypto.News — 4 independent sources, 4 reports
- 27 Sept 2026, 01:30 UTC: Bitcoinist — 5 independent sources, 5 reports
- 27 Sept 2026, 01:53 UTC: Bitcoin Insider — 6 independent sources, 6 reports
Affected entities
Also mentioned: USD Coin, BNB
Original sources
| Publisher | Report | Role | Published |
|---|---|---|---|
| Bitcoin.com News Company, official | White Hats Swipe $5.7M in NFTs Before Attackers Get Their Shot | Independent | |
| Decrypt Crypto media | Magic Eden Warns Old Ethereum NFT Listings Are Exposed to Payment Processor Exploit | Original | |
| CryptoSlate Crypto media | Old Magic Eden NFT approvals put users at risk after whitehat moves 3,832 NFTs | Independent | |
| Crypto.News Crypto media | NFT sales rise 57.17% to $55.5M as Ethereum leads | Independent | |
| Bitcoinist Crypto media | Magic Eden Says Legacy Approvals Exposed $5.7M In NFTs To Exploit | Independent | |
| Bitcoin Insider Aggregator | Magic Eden Details Recovery Steps After Legacy Approval Exploit Drains $1.8M in wETH | Syndicated |
Related events
MATIC Stays at $0.38 as Binance Volume Sits Near $1 Million and $0.31 Is Cited
Blockchain.News reports MATIC pinned at $0.38 on roughly $1 million of Binance spot volume, with $0.31 cited and the 200-day average at $0.69.
Polygon Labs adds TRON to Open Money Stack for USDT payments and payouts
Polygon Labs said Open Money Stack now supports TRON, letting businesses take USDT deposits on TRON, route it to EVM networks and pay out to banks, cards or cash.
Polygon burned 100 million POL, about 1% of supply, using collected network fees
Polygon permanently burned 100 million POL, about 1% of supply, drawing on fees accumulated in its fee-collector contract, Polygon Foundation CEO Sandeep Nailwal said.
Polygon TVL at $765 million as Polymarket departure cuts83.6% of monthly fees
Blockchain.News reports Polygon's TVL at $765 million with Polymarket, once83.6% of its $37 million monthly fees, departing, while MATIC trades at $0.38.
Polygon Foundation to burn 100 million POL tokens pending Security Council sign-off
Polygon Foundation CEO Sandeep Nailwal said the network will permanently burn 100 million POL from a fee collector holding about 121 million POL, pending Security Council signatures.
Solana Foundation hires former Binance CMO Conlan as strategy chief and Polygon exec Raees for payments
Rachel Conlan left Binance to become Solana Foundation chief strategy officer, and Polygon Labs' Jamal Raees joined as general manager of payments.
