Yuga Labs Executive Urges Users to Revoke Blur Contract Approvals

Yuga Labs blockchain vice president Quit urged NFT users to immediately revoke approvals granted to Blur smart contracts, citing the risk of a malicious contract upgrade.

Quit said an investigation had not found an exploitable flaw in Blur’s existing contracts. However, the contracts can be upgraded, creating a potential path for unauthorized changes in the future.

At least $10 million worth of non-fungible tokens remain approved for transfer by Blur contracts, leaving their security dependent on how the contracts are operated. Users were advised to use a contract-approval revocation tool to remove those permissions.

The warning follows Blur’s announcement that it plans to disable its front end on Nov. 12. The shutdown date is separate from the contract risk, but users with remaining approvals may face continued exposure unless they revoke them.

Blur is an NFT marketplace, and smart-contract approvals allow its contracts to interact with assets held in users’ wallets. Quit’s warning focused on potential attacks or malicious upgrades rather than a confirmed exploit.