Whitehat group recovered ~26,000 NFTs from exploited contract and is negotiating return of ~260 WETH seized by opportunistic frontrunner.
Security & Exploits ·
A whitehat recovery operation rescued approximately 23,155 NFTs following the discovery of a vulnerability in Payment Processor V2. The exploit, which surfaced over 12 hours after initial abuse, exposed a wider class of affected assets across multiple contracts. The recovery team coordinated with LimitBreak to pause Payment Processor V3 and addressed similarly vulnerable assets on ApeChain, securing NFTs valued at over $5.7 million.
During the incident, a reverse application of the same exploit endangered approximately 660 WETH, which the whitehat group was unable to recover in time. However, an opportunistic actor executed a copycat exploit and obtained roughly 260 WETH from the vulnerable contract. The recovery address has since contacted the actor via onchain message to negotiate the return of those funds to rightful owners.
All recovered NFTs have been relocated to secure addresses, pending owner claims after affected approvals are revoked. The operation required coordination among multiple parties, though the precise mechanisms for redistributing the seized WETH remain unclear.