Used jpeg dealer \ Solidity dev & auditing \ VP Blockchain @yugalabs \ Founder @oSnipeNFT
The swamp
- Tweets 26,447
- Following 3,712
- Followers 107,086
- Likes 60,780
Pinned Tweet
So you're upset you didn't sell the top? Don't worry, you won't sell the next one either. Or the one after that.
313
1,343
2,344
Claim site is live. If I was able to save your NFTs, you can now reclaim them. You will have to revoke the PaymentProcessor approval first, if you haven't already.
You may also opt to donate as part of your transaction.
nftsaresafu.xyz/
113
186
695
27,427
and finally:
this is a sad day for the NFT space. Yes we saved ~$6M worth of NFTs, but we couldn't save everything and many people are hurting.
At least today wasn't a complete tragedy, but I wish things would've gone just a little bit differently, and it could have been a complete triumph.
My heart goes out to those affected ♥️
18
17
230
4,261
If you are a collection owner of an ERC721C or ERC1155C collection, chances are your holders will be unable to claim from the rescue site.
You can either:
- set 7702 delegate OTC enabled in your transfer validator settings or
- allowlist 0xa5F629Daf7F21364ED39f84bD730FF6571227648 (eth) or 0xcec36a4a219749c79c82778dcef87a665750c69c (apechain) as a 7702 delegate on your list
Currently blocked collections here (Yuga controlled collections will be fixed tomorrow):
some notes:
- some collections impose transfer validator enforcements that prevent claims at the moment. I will work with collection owners to enable those over the next few days.
- the claim interacts with a 7702 delegated wallet, which seems to fuck up simulation and can even throw a scary warning (at least in Rabby).
- If you have any issues with the site, fuck you I'm going to sleep (I'll work on it more in the morning)
13
21
97
9,069
little dry run period: nftsaresafu.xyz/
check what you have claimable. If you see anything that looks incorrect, please let me know.
Will open claims based on the same snapshot after a few more QC runs.
25k NFTs so please be patient.
Claim portal is coming together and should be out within a few hours.
Thank you for everybody donating through X Money.
If you'd prefer to donate ETH/tokens, I spun up a dedicated address:
nftsaresafu.eth
In addition to the time spent and yet to spend, last night cost me $7500 in gas, so I appreciate all of the support 🫡
161
128
670
71,104
Quit retweeted
This Ape has and will ALWAYS be to me the prize of my entire collection and maybe the most loved thing I own bar none. It was my first big purchase years back and means S0 much to me. 🍊 has always been my fav color and the prison jump suit was a reminder of when I was locked up by the Feds years ago. Today I’m giving it as a gift to @0xquit for basically saving the space for all of us last night. I was lucky to not get drained but many of my friends did. His selflessness and generosity is what I inspire to be. When I get home from work will transfer my orange 🧡 to him. It’s definetly going to the absolute best of humans …. I know my ape will now be in the home where he belongs 🙏
830
464
3,163
83,603
Also thanks to whoever launched the @UsePaid token for me. I am not a holder nor am I endorsing but it has resulted in a big donation so thank you.
If tokens are your thing it's at J141JCiXKGcrhDCgWUTCL9qz7h943iCibNiLNfqZpump but DYOR, I will not be shouting it out again.
Claim portal is coming together and should be out within a few hours.
Thank you for everybody donating through X Money.
If you'd prefer to donate ETH/tokens, I spun up a dedicated address:
nftsaresafu.eth
In addition to the time spent and yet to spend, last night cost me $7500 in gas, so I appreciate all of the support 🫡
88
115
647
65,901
Claim portal is coming together and should be out within a few hours.
Thank you for everybody donating through X Money.
If you'd prefer to donate ETH/tokens, I spun up a dedicated address:
nftsaresafu.eth
In addition to the time spent and yet to spend, last night cost me $7500 in gas, so I appreciate all of the support 🫡
363
352
2,047
250,569
The bulk of the damage is done, but there are still assets that are vulnerable to the exploit. I'm doing what I can to sweep what's left but hundreds of scammers are also doing the same.
Whether you're affected or not, if you have open approvals to the addresses below, please revoke them. The open approvals can and will be used against you if affected assets are returned to your wallet while they're still open.
REVOKE APPROVALS TO THESE ASAP:
Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366
use revoke.cash or similar.
138
148
707
78,000
At 9AM EST today somebody abused a bug in Payment Processor V2 to steal 10 Meebits, 50 Otherdeeds, 10 WoW, and 235 Desperate Apewives.
It wasn't until over 12 hours later that somebody reported it to me, and upon digging in I realized that a great many NFTs were subject to the same exploit.
I got in touch with the team over at LimitBreak and they quickly paused Payment Processor V3, which was subject to the same exploit. Unfortunately, V2 was not pausable, so the only path towards protecting affected assets was to run a whitehat operation.
Similarly, V3 on ApeChain is temporarily in a state where it cannot be paused, so ApeChain assets approved to V3 needed to be saved as well.
All in all, we rescued 23,155 NFTs worth north of $5.7M USD.
We later discovered that a similar exploit could be used in reverse to steal WETH. 660 WETH was at risk, which we unfortunately were not fast enough to recover. Apologies to those affected.
Shout out to @Boomskite for flagging the initial exploit tx to me, and @coffeedev @0xjustadev and @whiteoakkong for acting quickly and assisting with the recovery.
All NFTs are safely relocated. Soon, owners will be able claim them back after revoking the exploitable approvals.
Addresses to revoke below.
625
602
2,944
360,364
Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366
use revoke.cash or similar.
27
43
336
136,294
REVOKE APPROVALS TO THESE ASAP:
Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366
use revoke.cash or similar.
254
725
2,156
497,043
If your assets moved without your permission and now live in 0x71cf3f5724bd2b72ef6464992acd26216de7fe33, don't worry, they are safe.
Still, revoke the contracts above.
hey ya this is a whitehat and everything in 0x71cF3f5724bD2B72Ef6464992aCd26216DE7fe33 is safe and will be returned once they are no longer at risk
61
66
428
86,597