Key Takeaways
- A white-hat operation secured 23,155 NFTs worth over $5.7 million after discovering a bug in Limit Break's Payment Processor.
- The vulnerability was discovered in Limit Break's Payment Processor, which Magic Eden previously used for Ethereum trades.
- Holders who previously interacted with Magic Eden's Ethereum marketplace are urged to revoke vulnerable approvals to prevent further damage.
Introduction to NFT Rescue
A recent incident in the NFT market highlighted the importance of security and swift action in protecting digital assets. A wallet suddenly pulled thousands of NFTs from hundreds of owners for 0 ETH, setting off alarms around Magic Eden. However, the wallet belonged to a white-hat rescue operation, which ultimately secured 23,155 NFTs worth more than $5.7 million after discovering a bug involving old Limit Break Payment Processor approvals.
Background of the Incident
Cirrus first raised the alarm after spotting 3,832 NFTs moving from hundreds of wallets through apparent Magic Eden sales for 0 ETH. Yuga Labs' 0xQuit stepped in to reveal that the rescue was a white-hat operation and that all NFTs in the wallet were safe and would be returned once they were no longer at risk.
Vulnerability in Limit Break's Payment Processor
The vulnerability was discovered in Limit Break's Payment Processor, which Magic Eden previously used for Ethereum trades before closing its EVM marketplace in March. According to 0xQuit, an attacker first stole 10 Meebit non-fungible tokens, 50 Otherdeeds, 10 World of Women NFTs, and 235 Desperate Apewives.
Once the wider exposure became clear, white hats began moving vulnerable NFTs into custody before attackers could reach them. However, roughly 660 WETH slipped through before the rescue, which 0xQuit described as "the $1.7M in WETH I wasnโt fast enough for."
Revoking Vulnerable Approvals
Holders who previously interacted with Magic Eden's Ethereum marketplace have been urged to revoke Limit Break Payment Processor V2 approvals on Ethereum and V3 approvals on ApeChain. Rescued NFTs are expected to be returned after affected owners revoke those permissions, but no public claim date has been announced.
- 23,155 NFTs were secured by the white-hat operation, worth over $5.7 million.
- Roughly 660 WETH slipped through before the rescue, valued at around $1.7 million.
- Holders who previously interacted with Magic Eden's Ethereum marketplace are urged to revoke vulnerable approvals.
Expert Perspective
Experts in the field have praised the swift action taken by the white-hat operation, highlighting the importance of collaboration and quick response in preventing further damage. The incident also underscores the need for users to be vigilant and proactive in managing their digital assets and revoking unnecessary approvals.
Implications for Readers in India
The incident serves as a reminder for NFT enthusiasts in India to be aware of the potential risks associated with digital assets and to take necessary precautions to protect their investments. As the NFT market continues to grow in India, it is essential for users to stay informed and adapt to the evolving landscape of digital ownership and security.
What to Watch Next
As the investigation into the incident continues, users can expect further updates and guidance from Magic Eden and Limit Break. In the meantime, holders of NFTs who have interacted with Magic Eden's Ethereum marketplace are advised to revoke vulnerable approvals and stay vigilant for any further developments.
Read also: Prediction Market to Hit $10 Trillion
Timeline of Events
The incident unfolded rapidly, with the initial alarm raised by Cirrus and subsequent intervention by the white-hat operation. The following timeline summarizes the key events:
- Early Friday: Cirrus raises the alarm after spotting 3,832 NFTs moving from hundreds of wallets.
- Minutes later: Yuga Labs' 0xQuit reveals that the rescue is a white-hat operation.
- Later: 0xQuit announces that the white-hat operation has secured 23,155 NFTs worth over $5.7 million.
Magic Eden has stated that it is working with Limit Break to investigate additional mitigation measures and has credited 0xQuit for the "white hat rescue" and for flagging the vulnerability.
Conclusion
The recent NFT rescue operation highlights the importance of security and swift action in protecting digital assets. As the NFT market continues to grow, it is essential for users to stay informed and adapt to the evolving landscape of digital ownership and security. By being vigilant and proactive in managing their digital assets, users can help prevent similar incidents in the future.
Frequently Asked Questions
What happened in the NFT rescue operation?
A white-hat operation secured 23,155 NFTs worth over $5.7 million after discovering a bug in Limit Break's Payment Processor.
What is the vulnerability that was discovered?
The vulnerability was discovered in Limit Break's Payment Processor, which Magic Eden previously used for Ethereum trades.
What should holders of NFTs do to prevent further damage?
Holders who previously interacted with Magic Eden's Ethereum marketplace are urged to revoke vulnerable approvals to prevent further damage.
