Victim of PaymentProcessor V2 exploit coordinating NFT returns through nftsaresafu.xyz recovery platform.
Security & Exploits ·
A victim of the PaymentProcessor V2 exploit has coordinated with recovery efforts to return stolen NFTs to their original owners. On September 25, 2026, PaymentProcessor V2 was exploited, resulting in 29,048 NFTs being rescued. As of the coordination message, 11,019 assets—representing 37.9 percent of those rescued—had been returned.
The recovery operates through nftsaresafu.xyz, a platform where affected users can reclaim stolen assets including Bored Ape Yacht Club tokens, Otherdeed NFTs, and Koda pieces. An onchain message sent to an address holding assets from the incident invited the holder to submit their NFTs for redistribution to legitimate owners. Donations in ETH can be sent to nftsaresafu.eth to support the recovery effort.
The recovery effort emphasizes that many affected parties may remain unaware of their recoverable assets, particularly those who do not actively monitor social channels. The platform has listed specific token IDs available for reclamation, though the total number of users still waiting to retrieve their holdings remains undisclosed.