We are sharing an interim update regarding an exploit identified with Limit Break Payment Processor V2, a NFT trading protocol maintained by the company Limit Break and which Magic Eden adopted to settle trades on EVM in 2024. Magic Eden stopped using Payment Processor V2 in Oct 2024 and ceased our EVM marketplace altogether in Q1 2026. No live Magic Eden listings were impacted in this exploit. We will provide more updates as we investigate the impact further. We are also contacting Limit Break as they are the owner & maintainer of the protocol to see what other mitigations can be done, including progress on pausing transfers on the protocol. Thank you to @0xQuit for the whitehat rescue and for bringing this to our collective attention: https://x.com/0xQuit/status/2103410682368512505 Why are ME listings being shown to be involved? NFTs listed on ME EVM from approx Feb 2024 to Oct 2024 could be impacted by this issue with the Limit Break Payment Processor v2 contract. Any listings on ME EVM after Oct 2024 should not be impacted here. We are still further refining our investigation and will provide more updates here. In the meantime, if you listed or traded NFTs on Magic Eden’s EVM marketplace before we shut it down, revoke this contract: Limit Break: Payment Processor (V2) 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834 Go through our instructions here: https://revoke.cash Ethereum → filter that address → revoke every NFT “approved for all” row Repeat for the following chains: - Polygon - Base See also 0xQuit’s tweet on revocation for further reference also: https://x.com/0xQuit/status/2103410684616708576 NOTE: Revoking does not return tokens that already moved. Again, we will keep the community updated as we investigate further.