Quit warns PPV2 exploit is still active as unrevoked approvals keep assets at risk

Monitoring by Quit indicates the Payment Processor V2, or PPV2, exploit is still ongoing, with risk remaining for users who have not revoked related approvals even if they were not previously affected. The warning centers on lingering authorization exposure rather than only confirmed past losses, making approval revocation the immediate recommendation. Quit cited a recent case from about one hour earlier in which one address lost 0.15246 WETH in the block immediately after accepting an offer and receiving funds. According to the monitoring update, the attacker sent 99% of the proceeds as a tip to Titan Builder and kept only about 0.0015 ETH, leaving almost no room to recover funds through front-running. Quit also proposed product-level checks for OpenSea. It said the marketplace could verify whether a user still has risky approvals before an offer is accepted and require those approvals to be revoked first. It added that when an NFT is transferred, the receiving address should also be checked for the same type of approval exposure.