Digital Asset
Intelligence
Security Incident · Blockchain

Limit Break Smart Contract Vulnerability: $2.80M Reported Loss

·Historical incident record

Incident Overview

An attacker exploited a bug in Limit Break’s Payment Processor V2, abusing stale Magic Eden EVM marketplace approvals to steal blue-chip NFTs via zero-price “sales” and to drain WETH in reverse. V2 could not be paused, so Yuga Labs VP of Blockchain @0xQuit led a whitehat rescue that moved 23,155 NFTs worth over $5.7M to safety; about 660 WETH could not be recovered in time. Magic Eden and Limit Break later urged users to revoke V2/V3 approvals immediately.

Sources & References

Original incident referencehttps://x.com/0xQuit/status/2103410682368512505 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodVM-level atomicity vulnerability
    Reported lossNot disclosed
  2. Incident date
    Attack methodElements Software Vulnerability
    Reported loss$ 320,000,000
  3. Incident date
    Attack methodPrivate Key Compromised
    Reported loss$ 3,000,000
  4. Incident date
    Target

    Duelbits

    Attack methodPrivate Key Leakage
    Reported loss$ 7,000,000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 2,300,000