Puzzle Panic is a 3D arcade puzzle game set in the @Digidaigaku universe. From day one, the goal was simple: make something genuinely fun, accessible, and polished enough for millions of players.

PAYMENT PROCESSOR V2/V3 PERMISSIONS HACK UPDATE: First, we want to thank the heroic efforts of @0xQuit. His quick thinking vastly diminished the damage caused by the attacker. @jiri123_eth followed 0xQuit and saved many NFTs as well. Thank you. We need more people like them in web3. Payment Processor V2 is an immutable contract. By design, an immutable contract cannot be updated or patched by anyone. That is how web3 works. Please do not wait for us or anyone else to "fix" this. Go revoke permissions NOW. Payment Processor V2 was integrated in collaboration with Reservoir and Magic Eden over months in 2023 and 2024, and the code was audited multiple times by professional audit firms. Everyone involved worked to verify the protocol's security. On 11/18/24, Limit Break released Payment Processor v3, which added, among other things: (1) the ability to pause trading on v3, and (2) time-bound permissions that automatically expire after a set period. Changelog: apptokens.com/docs/integrati… Because the most affected approvals were granted to PPv2, an immutable contract, those approvals cannot be paused. Limit Break has paused v3 to stop further activity there. For v2, the only protection is to revoke your approvals now. You MUST revoke all permissions to Payment Processor v2 and Payment Processor v3 NOW. Our team has been working on this non-stop over the past day and the investigation is ongoing. We will share verified updates as we have them.

At 9AM EST today somebody abused a bug in Payment Processor V2 to steal 10 Meebits, 50 Otherdeeds, 10 WoW, and 235 Desperate Apewives. It wasn't until over 12 hours later that somebody reported it to me, and upon digging in I realized that a great many NFTs were subject to the same exploit. I got in touch with the team over at LimitBreak and they quickly paused Payment Processor V3, which was subject to the same exploit. Unfortunately, V2 was not pausable, so the only path towards protecting affected assets was to run a whitehat operation. Similarly, V3 on ApeChain is temporarily in a state where it cannot be paused, so ApeChain assets approved to V3 needed to be saved as well. All in all, we rescued 23,155 NFTs worth north of $5.7M USD. We later discovered that a similar exploit could be used in reverse to steal WETH. 660 WETH was at risk, which we unfortunately were not fast enough to recover. Apologies to those affected. Shout out to @Boomskite for flagging the initial exploit tx to me, and @coffeedev @0xjustadev and @whiteoakkong for acting quickly and assisting with the recovery. All NFTs are safely relocated. Soon, owners will be able claim them back after revoking the exploitable approvals. Addresses to revoke below.