We are sharing an interim update regarding an exploit identified with @limitbreak Payment Processor V2, a NFT trading protocol maintained by the company Limit Break and which Magic Eden adopted to settle trades on EVM in 2024. Magic Eden stopped using Payment Processor V2 in Oct 2024 and ceased our EVM marketplace altogether in Q1 2026. No live Magic Eden listings were impacted in this exploit. We will provide more updates as we investigate the impact further. We are also contacting Limit Break as they are the owner & maintainer of the protocol to see what other mitigations can be done, including progress on pausing transfers on the protocol. Thank you to @0xQuit for the whitehat rescue and for bringing this to our collective attention: nitter.net/0xQuit/status/21034106… Why are ME listings being shown to be involved? NFTs listed on ME EVM from approx Feb 2024 to Oct 2024 could be impacted by this issue with the Limit Break Payment Processor v2 contract. Any listings on ME EVM after Oct 2024 should not be impacted here. We are still further refining our investigation and will provide more updates here. In the meantime, if you listed or traded NFTs on Magic Eden’s EVM marketplace before we shut it down, revoke this contract: Limit Break: Payment Processor (V2) 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834 Go through our instructions here: revoke.cash Ethereum → filter that address → revoke every NFT “approved for all” row Repeat for the following chainsPolygon Base See also 0xQuit’s tweet on revocation for further reference also: nitter.net/0xQuit/status/21034106… NOTE: Revoking does not return tokens that already moved. Again, we will keep the community updated as we investigate further.
Replying to @0xQuit
Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834 Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366 use revoke.cash or similar.

Sep 25, 2026 · 10:44 AM UTC

259
107
373
158,961
Sort replies: Relevant Recent Liked
lol what sort of bullshit blame game response is that! Your stack. Your customer. Own it.
38
17
249
6,384
It was Limit Break's trading protocol that got hacked and we stopped using that protocol 2 years ago. Not blaming, just stating exactly what happened
8
8
3,260
you stopped using v2 in 2024. the approval didn't get the memo. revoke or cry.
87
Magic Eden, you are so full of shit. I never listed my Outer Citizen, yet it was drained.
23
The death of magic eden is beautiful to watch and well deserved GG on the pivot from leading btc tech to the 1000th shitty scam casino
2
1
189
Ps fuck you @MagicEden since all the sales came through your platform you should be held criminally liable for having stolen goods the fact you’re out here blaming another company for your sloppy handling of a platform is disgusting. 🤮
1
2
85
Are you suggesting that because you stopped using something means you’re not liable for implementing it in the first place? Did your customers choose to implement LB’s protocol or did you? 🤔
1
65
Users lost NFTs and tokens through the old Limit Break Payment Processor vulnerability, even after your EVM marketplace was discontinued. Please acknowledge your responsibility, publish a recovery plan, and compensate affected users. Trust requires accountability.
4
Learn more about the incident
Magic Eden Update: With user security being our first concern, we recommend that all users temporarily revoke approvals for our contracts until we can further investigate the recent incident. Learn more: tinyurl.com/b83w376x
1
355
From your own tweet and do not try to delete the evidence cause it’s already been documented:
1
41
Update for MagicEden users
Magic Eden Update: With user security being our first concern, we recommend that all users temporarily revoke approvals for our contracts until we can further investigate the recent incident. Learn more: tinyurl.com/b83w376x
308
My @DeathbatsClub got drained
3
2
906
Pathetic response. @0xQuit a single entity has done more for this space in an evening than ME ever has. Delist from ME. They don’t deserve your business
30
Are you going to be getting this assets back & to the community?
1
12
I think you could have done a lot more than you did back then guys.
When @MagicEden exited Ethereum, it could’ve easily helped users clean up the on-chain approvals required to use its marketplace. A simple warning like: “If you previously granted our trading processor blanket NFT permissions, revoke them before we close.” could have protected many users who suffered in this attack. Sadly, as far as i'm aware, there was no such communication from them. 😐 Instead, in their official EVM shutdown guidance, Magic Eden simply told users that their listings, bids and offers required: “NO ACTION” So it seems they provided zero guidance on the underlying on-chain approvals that remained active. Aka, the ones that lead to this attack in which millions of dollars has been stolen from innocent users! How could such a huge potential attack vector be left entirely unmentioned at that time?! 😬
1
3
821
I always thought ME was shady and actually had the thought of them draining wallets after they closed down a bunch of their platform. These bastards just sucked money out of web 3 constantly and gave nothing back. And here we are and they are still wffing over web 3.
210
Fucking Larpers. Just give 0xQuick the entire marketplace, he has done more work on ME in one night then your entire dev team this past cycle. Can't believe you have CMs for this trash 🗑️
3
189
I’ve lost years of carefully collected and sentimental NFTs because of this, is there anything ME plans to do to make this right?
14
So what are you saying now to those that loose their funds? Why didn't you make this clear to stop using it eversince until just now?
189
This is bs and you all are accountable! Any true company would’ve worked through a way to decommission this from being vulnerable before moving off that protocol.
160
Got hacked, took all my AKCB @Rafsby can magic eden recover this?
3
2
771
You need to take responsibility, cannot run away
216
Summary for you all: It's not us that caused the problem, it's them over there...
5
624
Well there goes my shit. Thanks. Woke up to being drained. Great feeling.
1
1
960
AT SOME POINT Liability STOPS AT YOU none of us hired @limitbreak we trusted your platform GIVE ME A BREAK @MagicEden
1
73
This you by the way
We're refocusing Magic Eden on @solana, Packs & @DiceyHQ.📅 What's changing: Mar 9 — EVM & BTC marketplaces sunset Mar 27 — Bitcoin API shutdown Apr 1 — ME Wallet deprecated $ME remains central. Wallet users: export your keys before 4/1. For more details, review the below help center articles: - help.magiceden.io/en/article… - help.magiceden.io/en/article… - help.magiceden.io/en/article… - help.magiceden.io/en/article…
1
24
1,077
You guys are so fucking bad omg how many times have I said this before karma will catch up to you mfers
51
They didn't just take NFTs they took WETH too from the same exploit.
4
33
2,351
Friggin Magic Eden wished they could say Limit Break More in that tweet, but didn't want to look too too blamey😂
36
Anyone can point out problems; the great ones offer multiple solutions. @0xQuit has provided everything. Stop repeating him. What’s next? If nothing, then just say it.🫡
64
Thanks, I lost my PFP because of this bullshit. Both of you suck.
89
absolutely horrific comms on your side from start to finish - unreal.

ALT Hannibal Buress Whack GIF

1
181
How do you plan to give me my money back that the hacker stole from your faulty contract? You own me 0.07 weth
34

ALT Joe Biden Politics GIF by The Democrats

112
Phew, at least "No live Magic Eden listings were impacted in this exploit"
128