Whitehats rescue $5.7 million in NFTs after Limit Break Payment Processor exploit

A bug in Limit Break’s Payment Processor V2 was exploited to steal NFTs before security researchers identified the issue and launched a whitehat rescue operation, as reported by 0xQuit, also known publicly as Quit, the pseudonymous vice president of blockchain at Yuga Labs.

At 9AM EST today somebody abused a bug in Payment Processor V2 to steal 10 Meebits, 50 Otherdeeds, 10 WoW, and 235 Desperate Apewives.

It wasn’t until over 12 hours later that somebody reported it to me, and upon digging in I realized that a great many NFTs were subject to the… pic.twitter.com/Vue8TUyMD2

— Quit (@0xQuit) September 25, 2026

According to Quit, the exploit initially affected 10 Meebits, 50 Otherdeeds, 10 World of Women NFTs and 235 Desperate ApeWives, before researchers determined that many more NFTs were vulnerable to the same attack.

Limit Break quickly paused Payment Processor V3 after being alerted, but V2 could not be paused, requiring affected assets to be moved through a whitehat operation.

A similar vulnerability was also found on ApeChain, where some assets approved to V3 needed to be secured. In total, 23,155 NFTs worth more than $5.7 million were rescued, while a related exploit that could be used to steal WETH left 660 WETH at risk and unrecovered.

Magic Eden said it stopped using Payment Processor V2 in October 2024 and shut down its EVM marketplace in the first quarter of 2026, adding that no live Magic Eden listings were affected.

The marketplace said NFTs listed on its EVM platform between approximately February and October 2024 may still be exposed and urged users to revoke affected “approved for all” permissions.