White‑Hat Team Secures $5.7 M of NFTs After Limit Break Bug Exploit

Early on September 25, 2026, an on‑chain alert showed thousands of NFTs being transferred for 0 ETH from hundreds of wallets to a single address. The activity initially appeared to be a mass theft on Magic Eden, but Yuga Labs’ blockchain team, operating under the handle 0xQuit, confirmed the wallet belonged to a white‑hat rescue operation.

Scale of the rescue

The white‑hat team ultimately secured 23,155 NFTs valued at more than $5.7 million. The rescue followed the discovery of a bug in the Limit Break Payment Processor that left old approvals from Magic Eden’s Ethereum marketplace exploitable.

How the exploit worked

Limit Break’s Payment Processor V2 was used by Magic Eden for Ethereum‑based trades before the marketplace shut down its EVM platform in early 2026. Approvals granted to the processor were not revoked when the marketplace closed, allowing an attacker to initiate transfers that appeared as Magic Eden sales priced at 0 ETH.

What was taken

• 10 Meebit NFTs
• 50 Otherdeeds NFTs
• 10 World of Women NFTs
• 235 Desperate Apewives NFTs

In addition, roughly 660 WETH (about $1.7 million) was moved before the rescue could intercept it.

Next steps for owners

Yuga Labs advises holders who previously interacted with Magic Eden’s Ethereum marketplace to revoke their Limit Break Payment Processor approvals on Ethereum, Polygon, Base, and ApeChain. Revoking does not return tokens already transferred, but it prevents further unauthorized moves. Rescued NFTs will be returned after owners confirm revocation, though no public claim date has been set.

Magic Eden’s response

Magic Eden confirmed that no live listings were affected and that the exploit only concerns NFTs listed on its EVM marketplace between February and October 2024. The company is working with Limit Break to implement additional mitigations and thanked the white‑hat team for flagging the issue.