News

Public · Published

Old Magic Eden NFT approvals put users at risk after whitehat moves 3,832 NFTs

A processor permission tied to Magic Eden's EVM marketplace remained active after that marketplace closed, according to Revoke.cash. A whitehat, meaning an ethical security helper, moved 3,832 NFTs, while losses from malicious NFT activity stay unclear.

Published:

Updated:

What happened

A processor permission tied to Magic Eden's EVM marketplace remained active after that marketplace closed, according to Revoke.cash. A whitehat, meaning an ethical security helper, moved 3,832 NFTs, while losses from malicious NFT activity stay unclear.

Confirmed

Global impact / market context

Lingering approvals let others move a user's NFTs without fresh consent, so past marketplace use can still create risk. This matters because affected holders may face transfers they did not authorize, and the unclear loss figures make it hard to judge how many people are exposed.

Analyst inference

The article links the issue to ETH, meaning the Ethereum network where such approvals work, and to Magic Eden's closed EVM marketplace, an Ethereum-compatible venue. It does not give prices, totals, or named victims, so any wider market effect on NFT activity or investor positioning is not yet confirmed.

Analyst inference

What to watch

  1. The article names only ETH and says a processor permission survived the EVM marketplace's closure, while malicious NFT losses remain unclear, so no other affected assets, totals, or victims are confirmed. Confirmed
  2. Holders should consider revoking old marketplace approvals, which means canceling permissions that let contracts move their NFTs, and then check whether any unauthorized transfers happened afterward. Proposed
  3. Further clarity on how many NFTs were lost maliciously versus moved by the whitehat would show whether this is a contained cleanup or a broader unresolved security issue for users. Analyst inference

Affected assets

  • ETH — Ethereum

Evidence