Home›Crypto›Market Structure›Magic Eden EVM shutdown leaves NFT approvals active, R…

Magic Eden EVM shutdown leaves NFT approvals active, Revoke.cash warns

Revoke.cash said a Payment Processor V2 permission can still move NFTs until owners revoke it, and a researcher used the flaw to transfer 3,832 NFTs as a whitehat rescue.

Reported · Written up by our desk · Market Structure

Old Magic Eden NFT approvals may still expose some former users even months after the company ended support for its Ethereum marketplace, wallet security service Revoke.cash warned on September 25, according to CryptoSlate.

Revoke.cash said a vulnerability in Limit Break's Payment Processor V2 affects wallets that still authorize the contract to move NFTs, with those approvals remaining active until owners revoke them.

CryptoSlate reports that security researcher 0xQuit used the vulnerability to move 3,832 NFTs from approved wallets as zero ETH sales, describing the activity as a whitehat rescue while assets were held in a custody wallet until they could be returned safely.

Magic Eden ended EVM marketplace support on March 9, 2026, but CryptoSlate notes that closing the marketplace did not cancel the separate onchain processor approval, and Revoke.cash said it had not determined how many NFTs, if any, were taken by malicious actors.

Latest closeEthereum $2,691.48 ▲0.2%

More like this

Sources