White hat hacker saves over 23,000 NFTs from exploit worth $6 million

Following a security vulnerability detected on Magic Eden, a white hat hacker rescued more than 23,000 NFTs across hundreds of wallets, worth an estimated $6 million. Details on this case... The article White hat hacker saves over 23,000 NFTs from exploit worth $6 million first appeared on Cryptoast.

The non-fungible token (NFT) ecosystem was recently shaken by a major technical flaw linked to the "Payment Processor V2" protocol, a smart contract used by the Magic Eden platform. This vulnerability allowed malicious actors to orchestrate targeted thefts, affecting high-profile collections such as Meebits and Otherdeeds. Alerted by this critical situation, 0xQuit, a blockchain security expert and a recognized figure at Yuga Labs, identified that the risk was not limited to assets already stolen, but threatened thousands of other digital wallets.

Faced with the technical impossibility of immediately suspending the faulty contracts, an emergency "white hat" intervention was triggered. Leveraging advanced technical expertise, the researcher and his team of developers spent an entire night manually securing assets by moving them to protected areas. This large-scale operation successfully safeguarded 23,155 NFTs, representing an estimated market value of approximately $6 million, thereby preventing a much larger financial disaster for collectors.

Despite this collective success, the outcome remains bittersweet for those involved. While preserving the NFTs is a notable victory, hackers still managed to exploit a secondary loophole to siphon off approximately 660 WETH—a net loss of $1.7 million—due to a lack of time and sufficient responsiveness. This episode cruelly illustrates the constant race against the clock that characterizes cybersecurity in a decentralized environment, where every second of exploitation can be worth millions of dollars.

This incident underscores once again the inherent fragility of permanent approvals granted to decentralized platforms. Experts strongly advise users to practice rigorous digital hygiene by regularly revoking access granted to smart contracts via dedicated tools. This affair serves as a reminder that, in the Web3 universe, the responsibility for asset security largely rests on the vigilance of the owners, as software vulnerabilities can at any moment turn a trading interface into an open door for cyberattackers.