On September 25, 2026, a vulnerability in PaymentProcessorV2 allowed an attacker to forge the “original sender” via a trusted forwarder in the ERC-2771 style. Quit, Yuga Labs VP of Blockchain, coordinated a whitehat rescue operation that saved 23,155 NFTs worth over $5.7 million. However, 660 WETH remain permanently lost as they could not be recovered in time. Affected owners must now revoke approvals on PaymentProcessorV2 and V3 contracts via revoke.cash before claiming their rescued NFTs at nftsaresafu.xyz.
Source: Read the original article

