jimminy

0xbfA8...A68e rescued ~280 WETH in the PPV2 incident on 9/25, and has agreed to return 90% to affected users, less an optional 5% bounty. To reclaim, send them an onchain message and confirm you've revoked the approval. You can now do both at nftsaresafu.xyz

35% of all rescued assets have already been returned. Keep pushing and spreading the word. Lots of people who don't check twitter may not even know they have recoverable assets. nftsaresafu.xyz

worked through the entire night to save ~$6M worth of NFTs and all I'll be able to think about is the $1.7M in WETH I wasn't fast enough for. Fuck scammers.

At 9AM EST today somebody abused a bug in Payment Processor V2 to steal 10 Meebits, 50 Otherdeeds, 10 WoW, and 235 Desperate Apewives. It wasn't until over 12 hours later that somebody reported it to me, and upon digging in I realized that a great many NFTs were subject to the same exploit. I got in touch with the team over at LimitBreak and they quickly paused Payment Processor V3, which was subject to the same exploit. Unfortunately, V2 was not pausable, so the only path towards protecting affected assets was to run a whitehat operation. Similarly, V3 on ApeChain is temporarily in a state where it cannot be paused, so ApeChain assets approved to V3 needed to be saved as well. All in all, we rescued 23,155 NFTs worth north of $5.7M USD. We later discovered that a similar exploit could be used in reverse to steal WETH. 660 WETH was at risk, which we unfortunately were not fast enough to recover. Apologies to those affected. Shout out to @Boomskite for flagging the initial exploit tx to me, and @coffeedev @0xjustadev and @whiteoakkong for acting quickly and assisting with the recovery. All NFTs are safely relocated. Soon, owners will be able claim them back after revoking the exploitable approvals. Addresses to revoke below.

hey ya this is a whitehat and everything in 0x71cF3f5724bD2B72Ef6464992aCd26216DE7fe33 is safe and will be returned once they are no longer at risk