White-Hat Operation Moves Thousands of NFTs Amid Magic Eden Vulnerability Concerns

A suspected vulnerability involving Magic Eden prompted a white-hat operation that moved 3,832 NFTs from hundreds of wallets into a wallet controlled by Yuga Labs’ blockchain chief, 0xQuit. He said the assets were safe and would be returned when the risk passes, while NFT holders were urged to revoke marketplace permissions as a precaution. Yuga Labs CEO Michael Figge said a vulnerability had been found, but Magic Eden had not publicly confirmed an exploit or explained the incident’s scope.
The transfers appeared on-chain as sales for 0 ETH through a trading contract linked to Magic Eden’s former Ethereum marketplace, suggesting the operator used existing marketplace permissions to move the NFTs rather than accessing each wallet individually.
0xQuit identified the receiving wallet as 0x71cF3f5724bD2B72Ef6464992aCd26216DE7fe33 and said it held the rescued NFTs.
The articles note that Magic Eden had not confirmed the receiving wallet was an authorized white-hat address or that the transfers were part of a coordinated recovery, leaving the cause and full scope of the incident unresolved.
0xQuit had led a similar rescue in June 2026, moving 68 high-value NFTs—including Bored Apes and CryptoPunks—into Yuga Labs custody after an exploit affected Flooring Protocol.
Publishers
19
Articles
2
Reach
21