Magic Eden legacy approvals leave $5.7 million in NFTs exposed to exploit before rescue
- Published
- Updated
- Since then
- 3 new reports
- Also mentions
- ETH
Magic Eden said old Ethereum-era approvals left more than $5.7 million in NFTs exposed through a flaw in Limit Break’s Payment Processor V2, and a whitehat operation later moved 23,155 NFTs to safety. Magic Eden also said no live listings were affected, while users with old marketplace approvals were told to revoke them. The incident left some related assets unrecovered, including 660 WETH tied to the exploit.
Key claims & sources
What it means
People who still had old Ethereum-era approvals on Magic Eden were the ones most directly affected, because those approvals were identified as exposing NFTs to risk. That also mattered to users with live listings, since Magic Eden said those listings were not affected.
In practice, the situation changed from exposed approvals to a whitehat-moving-assets response: 23,155 NFTs were moved to safety after the flaw was identified. After that, users with old marketplace access still had to deal with lingering approvals by revoking them.
Market reaction i
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Decrypt
context
Crypto Economy
context
Bitcoinist
echo
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 1.5 years ago | Loopscale · Oracle attack incident | $5.8M |
| 6 months ago | Wasabi Protocol · Private key leakage incident | $5.7M |
| 2.1 years ago | EigenLayer · Impersonation Scam incident | $5.7M |
| 5.7 years ago | Roll · Hot wallet key compromised incident | $5.7M |
| 2.1 years ago | Truflation · Malware attack incident | $5.6M |
4282 incidents stored · 475 were as large as this one or larger ($5.7M)