Security Incident · Blockchain
Limit Break Smart Contract Vulnerability: $2.80M Reported Loss
An attacker exploited a bug in Limit Break’s Payment Processor V2, abusing stale Magic Eden EVM marketplace approvals to steal blue-chip NFTs via zero-price “sales” and to drain WETH in reverse.
- Reported loss
- $ 2,800,000
- Attack category
- Smart Contract Vulnerability
Incident Overview
V2 could not be paused, so Yuga Labs VP of Blockchain @0xQuit led a whitehat rescue that moved 23,155 NFTs worth over $5.7M to safety; about 660 WETH could not be recovered in time. Magic Eden and Limit Break later urged users to revoke V2/V3 approvals immediately.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.