Also a good reminder to not connect your vault/cold wallets to marketplaces, as an exploit like this would leave you vulnerable. Ledgers protect you at point of signature, but in this case the ability to allow Limit Break (due to Magic Eden) to transact on your behalf sidesteps the ledger and acts as a second point of authority. I'm seeing so many on the timeline surprised by this.
The bulk of the damage is done, but there are still assets that are vulnerable to the exploit. I'm doing what I can to sweep what's left but hundreds of scammers are also doing the same.
Whether you're affected or not, if you have open approvals to the addresses below, please revoke them. The open approvals can and will be used against you if affected assets are returned to your wallet while they're still open.