We are sharing an interim update regarding an exploit identified with @limitbreak Payment Processor V2, a NFT trading protocol maintained by the company Limit Break and which Magic Eden adopted to settle trades on EVM in 2024. Magic Eden stopped using Payment Processor V2 in Oct 2024 and ceased our EVM marketplace altogether in Q1 2026. No live Magic Eden listings were impacted in this exploit. We will provide more updates as we investigate the impact further. We are also contacting Limit Break as they are the owner & maintainer of the protocol to see what other mitigations can be done, including progress on pausing transfers on the protocol. Thank you to @0xQuit for the whitehat rescue and for bringing this to our collective attention: xitter.cf/0xQuit/status/21034106… Why are ME listings being shown to be involved? NFTs listed on ME EVM from approx Feb 2024 to Oct 2024 could be impacted by this issue with the Limit Break Payment Processor v2 contract. Any listings on ME EVM after Oct 2024 should not be impacted here. We are still further refining our investigation and will provide more updates here. In the meantime, if you listed or traded NFTs on Magic Eden’s EVM marketplace before we shut it down, revoke this contract: Limit Break: Payment Processor (V2) 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834 Go through our instructions here: revoke.cash Ethereum → filter that address → revoke every NFT “approved for all” row Repeat for the following chainsPolygon Base See also 0xQuit’s tweet on revocation for further reference also: xitter.cf/0xQuit/status/21034106… NOTE: Revoking does not return tokens that already moved. Again, we will keep the community updated as we investigate further.