Magic Eden2026-09-25 16:12:07White Hats Secure 23,155 NFTs After Legacy Magic Eden Approvals Are ExploitedLegacy approvals tied to Magic Eden were exploited, prompting white-hat responders to move affected assets into safer custody. According to TheDefiant, Yuga Labs’ 0xQuit said 23,155 NFTs with a value of more than $5.7 million had been secured. The figure points to a large-scale rescue effort rather than a completed fix for all exposed wallets. The report also said holders still need to take action on their own side. Users are advised to revoke NFT and token approvals connected to the vulnerable contracts, as those permissions remain a risk even after part of the inventory has been protected by white hats. The incident centers on older approvals, not a broad new description of the marketplace itself in the source material. At this stage, the key facts in the report are the number of NFTs secured, the estimated value involved, and the warning that wallet owners must revoke the affected approvals.280
Magic Eden2026-09-25 09:48:53Whitehat moves 3,832 NFTs to safety as Magic Eden-linked vulnerability triggers warningA whitehat operation moved 3,832 non-fungible tokens from hundreds of wallets on Friday after suspicious activity linked to Magic Eden drew alarm across the NFT community. X user Cirrus first flagged the transfers, saying a single wallet had moved assets from a large number of wallets in transactions that appeared to be sales through Magic Eden. Users were advised to revoke NFT approvals as a precaution. Yuga Labs pseudonymous vice president of blockchain, 0xQuit, later said the transfers were part of a protective whitehat action. According to 0xQuit, the NFTs in the receiving wallet are safe and will be returned after the risk has passed. Yuga Labs CEO Michael Figge also said a vulnerability had been discovered a few hours earlier and that more details would be shared soon. Magic Eden later said the issue was tied to Limit Break’s Payment Processor V2, a protocol it stopped using in October 2024. The marketplace said no live Magic Eden listings were affected, though NFTs listed on its EVM marketplace between roughly February and October 2024 may be impacted. It urged former users to revoke approvals for the contract on Ethereum, Polygon and Base, while noting that revoked permissions would not recover tokens that had already been moved.260
Magic Eden2026-09-25 08:47:25Magic Eden old-contract flaw feared after 3,800 NFTs moved for 0 ETH, Yuga Labs says white-hat rescue is underwayMagic Eden faced a fresh security scare on Sept. 25 after on-chain activity showed more than 3,800 Ethereum-based NFTs being transferred at 0 ETH from hundreds of wallets. The affected assets included blue-chip collections such as Bored Ape and Azuki, with the report estimating their combined value at roughly $1.4 million. The unusual transfers triggered concern across the NFT community that a vulnerability may have existed in Magic Eden’s older marketplace contracts. Yuga Labs blockchain vice president and security expert 0xQuit later said the incident was a preventive white-hat rescue rather than a theft. According to his public statement, all NFTs moved in the operation were being held safely at address 0x71cF3f5724bD2B72Ef6464992aCd26216DE7fe33 and would be returned once the risk had passed. Yuga Labs CEO Michael Figge also confirmed that the flaw had been discovered hours earlier and that the response had been handed over to 0xQuit’s team. As of publication, Magic Eden had not issued a formal explanation of the cause or the full scope of the issue. 0xQuit urged users who had previously listed or approved NFTs on Magic Eden, especially Ethereum assets, to revoke old approvals immediately, naming Ethereum Payment Processor V2 and ApeChain Payment Processor V3 as priority contracts.250
Magic Eden2026-09-25 12:32:09Magic Eden says incident was tied to a Limit Break protocol flaw, not a platform hackMagic Eden said the incident reported on Sept. 25 did not stem from a breach of its own platform. According to CEO Jack, the issue was linked to Limit Break’s trading protocol and smart contracts. The company said it stopped using that protocol two years ago, distancing the marketplace from the vulnerable system at the center of the event. Jack said Magic Eden is now in contact with Limit Break on next steps. One measure under discussion is a protocol-level pause on transfers involving the affected assets. Until more clarity is available, users have been advised to revoke any relevant approvals on Magic Eden. He also thanked white-hat hacker 0xQuit for helping recover stolen assets, saying the intervention prevented the situation from getting worse. Magic Eden added that it will release more updates after it confirms additional details.230
