The author, alerted over 12 hours after the initial theft, found many more NFTs vulnerable to the same Payment Processor bug. LimitBreak paused V3, but V2 was not pausable, and ApeChain's V3 could not be paused, prompting a whitehat operation that rescued 23,155 NFTs worth over $5.7M. A reverse exploit risked WETH; 660 WETH was lost. Owners can soon reclaim NFTs after revoking approvals to the listed V2 (Ethereum) and V3 (ApeChain) addresses. The author credited Boomskite, coffeedev, 0xjustadev, and whiteoakkong for their help.

AI summary of the linked source — not editorial content.

Story signal · how it spread on X · via Elfa

as of
thread quiet
Spread
i
Distinct X and Telegram accounts Elfa counted behind this story’s reports, summed over the thread. Not posts, not impressions.
64 accounts

4 reports
first post
Leviathan +2.2 h later

WETH reaction
i
Price change from the first post to 24 hours later (CoinGecko). BTC over the same window is shown so a market-wide move is not mistaken for a reaction to this story. Not advice.
−0.1% 24h after post

$2,692 → $2,688
BTC −0.3% same window

Thread · 5 events · 2 confirmed · 1 mitigation · last update 25 Sep 15:08 · quiet
  1. First reportUsers warn of malicious Payment Processor contracts on Ethereum and ApeChain5 acc.
  2. UpdateLimit Break Payment Processor exploit drains roughly $537,000 of NFTs on Ethereum46 acc.
  3. Leviathan published this article
  4. ConfirmedNFT approval exploit prompts warnings to revoke token approvals5 acc.
  5. MitigationWallets urged to check exposure to the Magic Eden–Limit Break exploit5 acc.
  6. ConfirmedWhite-hat rescue reportedly saves millions in NFTs for the Bored Ape community3 acc.

All times UTC.

Cited posts

  • @0xQuit QuitFirst reportOn X ↗

    REVOKE APPROVALS TO THESE ASAP: Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834 Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366 use https://t.co/kDGERRKviL or similar.

  • @I_am_Subcaptain Jay Jay (prev 丂𝖚𝖇𝖈𝖆𝖕𝖙𝖆𝖎𝖓 🧑‍🌾…On X ↗

    REVOKE APPROVALS TO These DAINERS ASAP: Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834 Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366 use https://t.co/2J1PFYuYDF or similar.

  • @hanbonjoviOn X ↗

    PSA https://t.co/cEURsCtM5U

Show 3 more cited posts
  • @0xshunshun 0xshun 順On X ↗

    重要安全提醒 以太坊和 Ape 链这两个 Payment Processor 先去撤销 有 NFT 被挪走的， @0xQuit 说是白帽会归还，有互动过的优先处理建议先把授权撤掉吧 https://t.co/SBwalKJ0IL

  • @0xGreggy Greggy🎒On X ↗

    Thank you, @0xQuit, for not quitting on another white hat rescue! Proud of you and the culture of @BoredApeYC on making sure the BAYC community and the whole NFT communities safe from hackers. 🫡 https://t.co/GVGUWWbs90

  • @r_cky0 r_ocky.eth 🍌🦍On X ↗

    This is why @BoredApeYC is the best community club on the internet! Thanks to @0xQuit for saving our asses! https://t.co/UAoSamlNwH

58 more accounts posted about this · 3 Telegram channels (no public link)

TradersTrader calls tracked by Elfa · not advice

Positioning · WETH

Open9 open positions · 9 long · 0 short

Tracked accounts lean long about 97% of the time, so a long-heavy book is normal, not a signal. As of 25 Sep 10:21 UTC.

Whole crypto market, not this story

Crowding56th percentile · vs last 28 days, 50 typical
Pulse 24h50/100 · unusualness of new calls, 0–100, 50 typical, higher means more long than usual
Book97.3% long · 11,990 accounts

As of 25 Sep 10:00 UTC.

Social-monitoring data, not investment advice Elfa prices CoinGecko post text from Xas of

Explore the topic

Loading related coverage…

Explore the full feed

Comments

Loading comments…