Whitehats rescue $5.7 million in NFTs after Limit Break Payment Processor exploit

A bug in Limit Break’s Payment Processor V2 was exploited to steal NFTs before security researchers identified the issue and launched a whitehat rescue operation, as reported by 0xQuit, also known publicly as Quit, the pseudonymous vice president of blockchain at Yuga Labs. At 9AM EST today somebody abused a bug in Payment Processor V2 to steal 10 Meebits, 50 Otherdeeds, 10 WoW, and 235 Desperate Apewives. It wasn't until over 12 hours later that somebody reported it to me, and upon digging in I realized that a great many NFTs were subject to the… pic.twitter.com/Vue8TUyMD2 — Quit (@0xQuit) September 25, 2026 According to Quit, the exploit initially affected 10 Meebits, 50 Otherdeeds, 10 World of Women NFTs and 235 Desperate ApeWives, before researchers determined that many more NFTs were vulnerable to the same attack. Limit Break quickly paused Payment Processor V3 after being alerted, but V2 could not be paused, requiring affected assets to be moved through a whitehat operation. A similar vulnerability was also found on ApeChain, where some assets approved to V3 needed to be secured. In total, 23,155 NFTs worth more than $5.7 million were rescued, while a related exploit that cou...