The SandboxThe Sandbox warns users of Magic Eden Payment Processor V2 exploit
The Sandbox issued a security notice to its community about an exploit in Payment Processor V2, an old trading contract built by Limit Break and used by Magic Eden in 2024. The vulnerability is being exploited to take NFTs from wallets that previously listed assets on Magic Eden.
- Affects wallets with legacy approvals from Magic Eden's former EVM marketplace (listings roughly February–October 2024)
- An attacker stole NFTs before white-hat operators rescued tens of thousands of assets, per reporting from Revoke.cash and others
- The Sandbox is flagging the risk to holders who listed its NFTs on the marketplace
The notice advises users who listed on Magic Eden to check for and revoke lingering approvals to the vulnerable contract to protect their assets from theft.
The Sandbox
A Decentralized Gaming Platform Made By Players Take your creative freedom to the next level & monetize it in the blockchain! Play, Create & Earn!
The Sandbox is the prime metaverse location that has been fueling the recent growth of virtual real-estate demand, having partnered with major IPs and brands including The Walking Dead, Atari, Rollercoaster Tycoon, Care Bears, The Smurfs, Shaun the Sheep, and Binance.
Building on existing The Sandbox IP that has more than 40 million global installs on mobile, The Sandbox metaverse offers players and creators a decentralized and intuitive platform to create immersive 3D worlds and game experiences and to safely store, trade, and monetize their creations. For more information, please visit www.sandbox.game and follow the regular updates on Twitter, Medium and Discord.
