Yuga Labs Rescues 23,155 NFTs After Payment Processor Exploit
The assets were valued at more than $5.7 million. Another 660 Wrapped Ether (WETH) was exposed but not recovered in time.
Yuga Labs secured 23,155 NFTs valued at more than $5.7 million after a vulnerability in its Payment Processor contracts exposed assets across multiple collections.
Yuga Labs blockchain vice president Quit said an attacker exploited Payment Processor V2 and took 10 Meebits, 50 Otherdeeds, 10 WoW NFTs and 235 Desperate Apewives. The incident also affected assets on ApeChain.
Yuga Labs worked with LimitBreak to urgently halt Payment Processor V3, which contained the same vulnerability. Contracts that could not be halted, including V2 and related ApeChain assets, were protected through a white-hat intervention.
The teams also found that the vulnerability could be used to steal Wrapped Ether (WETH). A total of 660 WETH was exposed, but it was not recovered in time.
All affected NFTs have since been moved to safety. Holders can reclaim their assets after revoking the vulnerable permissions.
