Magic Eden2026-09-25 16:12:07White Hats Secure 23,155 NFTs After Legacy Magic Eden Approvals Are ExploitedLegacy approvals tied to Magic Eden were exploited, prompting white-hat responders to move affected assets into safer custody. According to TheDefiant, Yuga Labs’ 0xQuit said 23,155 NFTs with a value of more than $5.7 million had been secured. The figure points to a large-scale rescue effort rather than a completed fix for all exposed wallets. The report also said holders still need to take action on their own side. Users are advised to revoke NFT and token approvals connected to the vulnerable contracts, as those permissions remain a risk even after part of the inventory has been protected by white hats. The incident centers on older approvals, not a broad new description of the marketplace itself in the source material. At this stage, the key facts in the report are the number of NFTs secured, the estimated value involved, and the warning that wallet owners must revoke the affected approvals.290
Magic Eden2026-09-25 16:17:19Magic Eden says old Ethereum NFT listings may still be exposed through Payment Processor V2 flawMagic Eden said NFTs listed on its EVM marketplace between roughly February and October 2024 may still be at risk because of a bug in Payment Processor V2, an NFT trading protocol built and maintained by Limit Break. The company said no active Magic Eden listings were affected, but older approvals tied to the contract may still remain in place. It urged anyone who listed or traded on its EVM marketplace to revoke the V2 contract’s "approved for all" permissions on Ethereum, Polygon, and Base through Revoke.cash. The warning followed disclosures from Yuga Labs Vice President of Blockchain 0xQuit, who said an attacker used the flaw to steal 10 Meebits, 50 Otherdeeds, 10 World of Women NFTs, and 235 Desperate ApeWives. Because Payment Processor V2 could not be paused, a whitehat rescue operation was launched after Limit Break paused V3, which shared the same issue. According to 0xQuit, the effort secured 23,155 NFTs worth more than $5.7 million, though 660 WETH exposed to a reverse form of the exploit was not recovered in time. Magic Eden had already stopped using the contract in October 2024 and shut down its EVM marketplace in early 2026. The episode comes a day after Bitget lost more than $380 million in Ethereum and other crypto assets in what Decrypt described as the year’s largest crypto hack so far.270
