Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
ETH Magic Eden legacy issues: Some older versions of NFT are still at risk
Although Magic Eden has shifted its focus away from Ethereum, the NFT assets of some early users on its platform are still exposed to risk. The platform issued a warning on Friday that NFTs that will be available on its EVM-compatible market between February and October 2024 may be affected by vulnerabilities in the NFT trading protocol "Payment Processor V2" built and maintained by Limit Break. EVM refers to Ethereum and its compatible blockchain network.
Magic Eden adopted the contract to settle transactions in 2024 and stopped using it in October of the same year, eventually completely shutting down its EVM market in early 2026. "This vulnerability has not affected any Magic Eden pending orders that are still active," the company said on social media platform X.
The core of the problem lies in long-term licensing. When users launch NFT, smart contracts are usually granted the right to move these assets, and this right remains in effect until revoked. Magic Eden urges all users who have previously listed or traded on its EVM market to revoke their "approved for all" rights to V2 contracts on the Ethereum, Polygon and Base networks through the Revoke.cash tool. The company also pointed out that revocation of authorization cannot recover the transferred tokens.
Attack details and rescue operations
Yuga Labs 区块链副总裁 0xQuit 透露，一名攻击者利用该漏洞盗取了 10 枚 Meebits、50 个 Otherdeeds、10 枚 World of Women NFT 以及 235 枚 Desperate ApeWives。Limit Break 暂停了存在相同缺陷的 Payment Processor V3，但由于 V2 版本无法暂停，迫使白帽黑客介入进行救援操作，即在攻击者得手前将易受攻击的资产转移至安全地址。
“总体而言，我们成功救援了价值超过 570 万美元的 23,155 枚 NFT，”0xQuit 写道。他表示，用户在撤销相关授权后，即可重新认领这些被救回的资产。
然而，由于反向漏洞导致暴露的 660 枚 Wrapped Ethereum (WETH) 未能及时被追回。
行业背景与市场环境
Magic Eden 早在今年二月便已放弃对以太坊和比特币的支持，转而专注于 Solana 生态及其加密赌场产品 Dicey，随后又逐步缩减了其多链钱包业务。这一事件的发生正值加密用户面临严峻挑战的时刻。就在昨天，未知黑客从 Bitget 交易所窃取了超过 3.8 亿美元的以太坊及其他加密资产，这已成为本年度规模最大的加密盗窃案。
