Quit says white-hat rescue hit 23,155 NFTs after Limit Break V2 abuse; 660 WETH lost
By Crypto Wire
September 25, 2026
Yuga Labs VP of Blockchain Quit (0xQuit) said in a September 25 thread that his white-hat team relocated 23,155 NFTs—valued at more than $5.7 million—after a third party abused a bug in Limit Break Payment Processor V2, while about 660 WETH was lost before it could be protected. The Crypto Times’s updated desk note (as of 10:39 UTC) treats those two figures as Quit’s unaudited claims and stresses that Revoke.cash still listed $0 confirmed stolen and 3,832 zero-ETH transfers on its incident page—the same early count filed this morning in LN 9707. That expanded rescue tally plus the 660 WETH miss is unused Culture Lore for Sep 25 OC: distinct from LN 9707’s ME-linked 3,832 framing and from LN 9709’s early Blockaid ~$1.7 million NFT-drain alert, which Crypto Times says Blockaid later deleted from X.
Sequence Quit reconstructed. He said he was contacted more than 12 hours after first abuse and that at 9:00 a.m. ET a third party used Payment Processor V2 to take 10 Meebits, 50 Otherdeeds, 10 World of Women tokens, and 235 Desperate ApeWives before the white-hat wave. Quit said he contacted Limit Break; the team paused Payment Processor V3 (same bug, he said), while Ethereum V2 was not pausable and ApeChain V3 was temporarily unpausable—so approved ApeChain inventory was moved too. He credited @Boomskite for flagging the first exploit transaction and @coffeedev, @0xjustadev, and @whiteoakkong for recovery work. Attribute every collection count and pause claim to Quit’s thread via Crypto Times—not as a Limit Break post-mortem. Limit Break had not published an incident statement as of the 10:39 UTC review.
Why the public checkers still disagree. Researcher Cirrus first flagged wallet 0x71cF3f5724bD2B72Ef6464992aCd26216DE7fe33 pulling 3,832 NFTs around 06:31 UTC; Quit confirmed the white-hat hold minutes later. Revoke.cash’s checker still framed that early wave as 3,832 zero-ETH sales worth about $1.4 million with $0 stolen confirmed. NFTScan’s live page for the rescue wallet showed roughly 8,472 NFTs across 447 collections near $1.72 million while inbound transfers continued—Crypto Times notes the gap with Quit’s 23,155 total may include ApeChain holdings and tokens not yet indexed. Neither figure is a closed forensic inventory. Early Blockaid reprints that treated ~$1.7 million as stolen NFT value should not be mixed with Quit’s later 660 WETH dollar talk or NFTScan’s rescue-wallet valuation—they measure different phases.
Collector hygiene remains the Culture Lore takeaway. Quit and Revoke.cash still name Ethereum Payment Processor V2 at 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834 and ApeChain Payment Processor V3 at 0x9a1D00000000fC540e2000560054812452eB5366 for revoke.cash (or wallet approval managers). Exposure is not limited to former Magic Eden Ethereum users—Atomist.eth pointed to Mintify’s prior V2 integration and Otherside marketplace docs listing the ApeChain V3 address. Disconnecting a website does not revoke an on-chain operator grant; canceling listings or a master nonce also fails, as Blockaid’s remaining revoke post still stresses. Do not send NFTs or ETH to any DM’d “recovery” address—even one mimicking 0x71cF.
Why Culture Lore 54 plus Latest News 16 (EP already 5/5—no new 13). Sep 25 already used desks 52, 53, 55, 56, 57, and 58; unused Culture Lore fits a Yuga white-hat overnight narrative that rewrote the morning’s ME/3,832 scare into a larger rescue lore with an explicit WETH miss. Meter Passport ~$2.3 million and Duelbits follow-ups stay rejected as near-echos of Sep 24 Rug Room files; HYPE ETF ~$4.77 million stays held for a later unused Ape Index or Marketplace angle.
What not to invent: a Limit Break root-cause blog, that Revoke.cash has adopted the 23,155 / 660 WETH totals, that every rescued NFT is already returned, or that Blockaid’s deleted $1.7 million NFT-drain alert equals Quit’s WETH figure. Stick to Quit’s thread via Crypto Times for the expanded rescue and WETH miss, and keep Revoke.cash’s 3,832 / $0 stolen checker as the still-live public counterweight.
Bottom line: Quit says 23,155 NFTs were white-hat rescued after Payment Processor V2 abuse while 660 WETH was lost—unused Culture Lore that updates Sep 25’s ME/3,832 morning scare without reprinting LN 9707 or 9709.
Disclaimer: This article is provided for informational and educational purposes only. It does not constitute financial, investment, legal, or trading advice. The NFT market is highly volatile, and past performance is not indicative of future results. Readers should conduct their own research and consult qualified professionals before making any decisions related to digital assets. The cover image for this article may have been created using artificial intelligence (AI).
