What happened

A flaw in Limit Break’s Payment Processor V2 put old Magic Eden Ethereum listings at risk. [The Block](https://www.theblock.co/news/web3/2026-09-25-magic-eden-legacy-approvals-leave-5-7-million-in-nfts-exposed-to-exploit-before-rescue-416874) reported that roughly $5.7 million in NFTs was exposed before whitehats moved tokens into protective custody.

The reported scale of that move is unsettled. [Cointelegraph](https://cointelegraph.com/news/magic-eden-nft-whitehat-vulnerability) and [CryptoSlate](https://cryptoslate.com/magic-eden-nft-approvals-risk-3832-whitehat-rescue) give a figure of 3,832 NFTs; The Block reports 23,155 tokens, while [Decrypt](https://decrypt.co/379342/magic-eden-old-ethereum-nft-listings-exposed-exploit) says more than 23,000.

Why it matters

The risk appears to have persisted after the marketplace activity that created it. According to Revoke.cash, a processor permission survived the closure of Magic Eden’s EVM marketplace. The case shows why the status of an old NFT approval matters even when the marketplace it was used for has closed.

Holders have been urged to revoke NFT permissions, but the supplied record does not establish how many approvals remain active. It also does not establish whether anyone lost NFTs to a malicious actor. The whitehat custody figures describe a protective response, not a confirmed theft total.

What to watch

Watch for a reconciled account of the NFTs moved into protective custody, their return to holders, and any confirmed malicious losses.

Sources and limits

Upstream references and independent checks

Digest dated 2026-09-26 · upstream model sonnet. Direct links are matched to all 4 upstream source IDs.

  1. 1
    Magic Eden scare puts 3,832 NFTs in whitehat protective custodyDirect upstream source · 2ffb676544b1bb27b5d603270c6f9e1efa9c18c9
  2. 2
    Old Magic Eden NFT approvals put users at risk after whitehat moves 3,832 NFTsDirect upstream source · 5180e8c2a680046a0076cb3a7e70d2dfe65c0cb3
  3. 3
    Magic Eden Warns Old Ethereum NFT Listings Are Exposed to Payment Processor ExploitDirect upstream source · 0ebcd9eefb187ce7ae411674da4149d37e58cab7
  4. 4
    Magic Eden legacy approvals leave $5.7 million in NFTs exposed to exploit before rescueDirect upstream source · 0aff5da6ee64233dbe9bba77ad49447dd2d9c13a

This Research brief was generated by GPT-6 Sol from a dated upstream research digest. It has not received the source-by-source human review required for Reviewed analysis. Material limit: The reported rescue counts differ sharply, and the supplied record does not confirm the number of malicious losses.