Yuga Labs Recovers 23,155 NFTs Worth More Than $5.7 Million
A Payment Processor V2 vulnerability exposed multiple NFT collections, while about 660 WETH remained at risk and was not recovered.
Yuga Labs moved and secured 23,155 NFTs worth more than $5.7 million after an attacker exploited a vulnerability in Payment Processor V2, putting multiple collections at risk.
The affected assets included 10 Meebits, 50 Otherdeeds, 10 WoW and 235 Desperate Apewives NFTs. The vulnerability was identified after the incident was reported more than 12 hours later, prompting a broader review of other NFTs using the same payment infrastructure.
LimitBreak suspended the similarly affected Payment Processor V3 after being contacted. Payment Processor V2 could not be paused, while the V3 deployment on ApeChain was temporarily unable to be stopped.
The vulnerability also allowed WETH to be targeted in the reverse direction, leaving about 660 WETH exposed. Those funds were not recovered.
All recovered NFTs were transferred to secure addresses. Holders will be able to claim their assets after revoking approvals for the vulnerable contracts.
