Thousands of NFTs moved during suspicious Magic Eden contract activity.
Users were advised to revoke old NFT marketplace approvals.
A whitehat operation claimed responsibility for asset protection efforts.
The Magic Eden NFT exploit triggered security concerns after thousands of NFTs moved from multiple wallets on September 25. NFT trader Cirrus first identified transactions involving assets linked to Magic Eden activity. The marketplace had not initially confirmed whether an exploit occurred or the total number of affected wallets.
Magic Eden NFT Exploit Raises Wallet Approval Concerns
The Magic Eden NFT exploit involved a wallet that moved thousands of NFTs from different holders. Cirrus warned users who had previously interacted with Magic Eden contracts to remove approvals from their wallets.
No idea whats going on here but I just watched this wallet drain 3832 NFTs from 100s of different wallets
May be a good idea to revoke all NFT permissions if you have any valuables in your wallet
Seems to be funded from a wallet possibly linked to @0xQuit so maybe a whitehat? pic.twitter.com/semJYsjEXX
— Cirrus (@CirrusNFT) September 25, 2026
The activity included NFTs being sold to the same wallet for zero ETH, creating uncertainty around the transactions. Cirrus suggested the activity could involve a whitehat actor attempting to secure vulnerable assets.
Pseudonymous user Quit later claimed the operation was a whitehat effort. Quit said assets stored at a specific address were safe and would be returned after security risks were resolved. Magic Eden has not confirmed whether the address belongs to an authorized recovery operation.
Magic Eden NFT Exploit Linked to Legacy Marketplace Contracts
Magic Eden later said legacy approvals from its former EVM marketplace exposed NFTs valued above $5.7 million. The company said no active Magic Eden listings were affected. The vulnerability involved Limit Break’s Payment Processor V2, which Magic Eden stopped using in 2024.
We are sharing an interim update regarding an exploit identified with @limitbreak Payment Processor V2, a NFT trading protocol maintained by the company Limit Break and which Magic Eden adopted to settle trades on EVM in 2024.
Magic Eden stopped using Payment Processor V2 in Oct…
— Magic Eden (@MagicEden) September 25, 2026
The affected assets included Meebits, Otherdeeds, World of Women NFTs, and Desperate ApeWives. Yuga Labs executive 0xQuit said a whitehat operation recovered 23,155 NFTs worth more than $5.7 million.
However, 660 WETH remained exposed and was not recovered during the operation. Magic Eden advised users to revoke Payment Processor V2 approvals across Ethereum, Polygon, and Base networks.
The Magic Eden NFT exploit highlights the risks linked to outdated wallet permissions. Users can reclaim rescued NFTs after removing vulnerable approvals, according to the marketplace update.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. CoinCryptoNewz is not responsible for any losses incurred. Readers should do their own research before making financial decisions.
<p>The post Magic Eden NFT Exploit Raises Concerns Over NFT Approvals first appeared on Coin Crypto Newz.</p>