Old Magic Eden Approvals Exposed 23,000 NFTs Before Whitehat Rescue

By Isaac • September 25, 2026 3:13 pm •

Magic Eden stopped using one of its old Ethereum payment contracts nearly two years ago. The approvals granted to that contract did not stop with it.

That gap left more than 23,000 NFTs exposed when an attacker found a flaw in Limit Break’s Payment Processor V2 this week. A whitehat rescue prevented a much larger loss, but the episode is a sharp warning for anyone who assumes an old marketplace approval disappears when the marketplace moves on.

Decrypt reported that Magic Eden used Payment Processor V2 to settle EVM trades in 2024, stopped using it that October and shut its EVM marketplace in early 2026. Users who listed NFTs between roughly February and October 2024 could