PaymentProcessor V2 incident: affected party coordinates onchain return of NFTs through coordinated settlement rather than individual negotiations.
Security & Exploits ·
An onchain message coordinating recovery efforts in the PaymentProcessor V2 incident proposes a consolidated approach to returning seized NFTs rather than handling individual claims separately. The exploit on September 25, 2026 affected 29,048 NFTs; as of the coordination attempt, 11,019 assets—representing 37.9 percent of rescued tokens—had been returned to owners.
The recovery effort operates through nftsaresafu.xyz, a platform allowing affected holders to reclaim assets including pieces from collections such as Bored Ape Yacht Club, Otherdeed, and Koda. The coordinated settlement model seeks to streamline the process by grouping negotiations rather than requiring each owner to negotiate recovery terms individually.
Participation remains incomplete; the message emphasizes outreach to holders unaware of recovery options through channels beyond social media. Donations to support recovery operations are being accepted at nftsaresafu.eth on Ethereum, though the full scope of response and timeline for completing remaining returns remains unspecified.