# protocol exploit — X 热门讨论 (2026-09-25 09:04 UTC)
## @pawnie_ (Pawnie) · 09-25 08:08 · ♥23 ↻1 💬14 Bitget hack isn't even explained yet and now we have a Magic Eden exploit
keep money on an exchange: bad keep NFTs in your wallet: bad
How to live?
feels like the best setup: revoke often and move everything you buy to a separate wallet that never connects to any app
► What happened > this morning one wallet started pulling NFTs from hundreds of wallets > the transfers show up as Magic Eden "sales" for 0 ETH > right now: 8,472 NFTs from 447 collections, ~700 ETH (~$1.7M) by NFTScan, still growing > BAYC, Azuki, Otherdeeds and a long tail > Magic Eden hasn't said a word yet
► How it works when you list an NFT on a marketplace, you sign setApprovalForAll
that approval lets the marketplace contract move EVERY NFT you hold from that collection. forever, until you revoke it
Magic Eden shut its EVM marketplace on March 9 their FAQ said "No action is required" for listings
the approvals stayed on-chain...
leading theory: someone found a way to use those old approvals. no official root cause yet
► Whitehat or not? @0xQuit (Yuga Labs' VP of Blockchain) says it's a whitehat op and everything in the rescue wallet will be returned once it's no longer at risk (he didn't say who's running it)
in June he helped rescue 68 NFTs ($500K+) from the Flooring Protocol exploit
real proof comes when the NFTs are back with their owners
► Theoretical loss the rescue wallet holds ~$1.7M
a blackhat would have had the same door open to every NFT still approved to that contract (nobody has published how many that is)
► What to do now > paste your address into https://t.co/fvAUHQ9Vkj (read-only, no need to connect) > revoke marketplaces you don't use anymore, Magic Eden first > type the URL yourself, fake "revoke" sites always follow events like this > ignore "recover your NFT" DMs
Stay safe https://x.com/pawnie_/status/2103396298317537322