ohxiyu
Feed
Feed
After Bitget suffered a $388 million hacker attack, Binance founder Changpeng Zhao publicly expressed support for Bitget, which is quite rare in an industry where competitors usually do not comment on each other's security incidents.
Bitget was established in Singapore in 2018, initially focusing on crypto derivatives and copy trading. The attack, amounting to $388 million, exposed its users to risks of withdrawal interruptions and liquidity pressure.
The staff of the Corporate Finance Division of the U.S. Securities and Exchange Commission issued a new batch of frequently asked questions, clarifying that eligible liquid staking certificate tokens are not subject to federal securities laws, and reiterated previous guidance on token buybacks.
The guidance states that buybacks on functional protocols generally do not involve necessary managerial efforts, and eligible liquid staking tokens can be regarded as digital commodities or digital instruments. This FAQ is at the staff level rather than a formal rule, and is a refinement of the December 2025 crypto asset FAQ and the explanatory document from March.
Such a big incident happened with magiceden, yet the official announcement only posted a tweet.
It's like an exchange being hacked, and they just release an announcement and that's it.
The CEO, CTO, and others haven't made any personal statements.
There are still 7 affiliated accounts under the official account, and they all pretend not to see it.
Please help me @ them.
The great person quit has grabbed the NFT for everyone, which can now be claimed.
Support donations, I checked the donation address, and so far, 13.28 eth has been received.
This can also be recorded as a historical event in the blockchain.
Quit
Claim portal is coming together and should be out within a few hours.
Thank you for everybody donating through X Money.
If you'd prefer to donate ETH/tokens, I spun up a dedicated address:
nftsaresafu.eth
In addition to the time spent and yet to spend, last night cost me $7500 in gas, so I appreciate all of the support 🫡
Litecoin has been like a clown in recent years.
When big blocks were popular, it promoted big blocks
When memes were hot, Litecoin was a meme
Now that privacy is hot, it starts promoting shielded pools
Actually, it is nothing at all
Litecoin
It's time for common sense to prevail.
The financial system is broken.
The incentives for storing and transferring wealth are misaligned in relation to the importance of every individual, regardless of social class or standing.
Value should stem first from the value of humankind itself, then be represented through energy and math, two of the main tenets of society's ability to thrive and adapt as a society. This should neither be distributed or controlled by any one entity or group, but rather as a fair and transparent ledger available to every man, woman, and child.
Fully decentralized, fairly launched, energy derived value from the people, by the people, and for the people. Everyone is valued and value is for everyone.
Litecoin is value. Litecoin is for everyone.
Bitget detected unauthorized transfers from some hot wallets at 18:31 UTC on September 24. One day later, the estimated value of the stolen assets was raised to $387.5 million. CEO Chen Jiaqi identified North Korean hackers as responsible.
Withdrawals remain suspended, while deposits and trading continue normally. Exchanges such as Binance and Bybit have supported freezing and tracking the stolen funds. The increase is due to on-chain tracking adding initially missed Zcash and TRON assets. Bitget states there are no new unauthorized transactions, and forensic investigations with Mandiant and SlowMist are ongoing.
Users originally gave approve for all authorization through Magic Eden's EVM marketplace. As the integrator, the platform has the obligation to inform and manage the long-term validity of old authorizations.
Some in the community have directly criticized this as a blame game.
As a "temporary update," the information is clearly incomplete.
The announcement did not provide the number of affected wallets, the scale of losses, the specific exploitation method of the vulnerability, nor did it explain why old authorizations could still be exploited nearly two years after the marketplace closed.
Users can only learn from other channels that about $2.8 million was stolen, and white hats rescued NFTs worth about $5.7 million.
This "disclaim first, investigate later" approach shows the platform is delaying a substantive response.
There is almost no reflection on the systemic risk of "indefinite authorization."
Listings authorized from February to October 2024 remain valid until 2026, indicating that when the platform closed the EVM marketplace, it did not proactively remind users to clear old authorizations, nor did it sufficiently warn about the permanent risks of "approve for all" when integrating the Limit Break protocol.
For users who still hold authorizations from that time, the most practical action is to immediately revoke NFT and token authorizations for that contract on Ethereum, Polygon, and Base.
Magic Eden 🪄
We are sharing an interim update regarding an exploit identified with @limitbreak Payment Processor V2, a NFT trading protocol maintained by the company Limit Break and which Magic Eden adopted to settle trades on EVM in 2024.
Magic Eden stopped using Payment Processor V2 in Oct 2024 and ceased our EVM marketplace altogether in Q1 2026. No live Magic Eden listings were impacted in this exploit. We will provide more updates as we investigate the impact further.
We are also contacting Limit Break as they are the owner & maintainer of the protocol to see what other mitigations can be done, including progress on pausing transfers on the protocol. Thank you to @0xQuit for the whitehat rescue and for bringing this to our collective attention:
Why are ME listings being shown to be involved?
NFTs listed on ME EVM from approx Feb 2024 to Oct 2024 could be impacted by this issue with the Limit Break Payment Processor v2 contract. Any listings on ME EVM after Oct 2024 should not be impacted here. We are still further refining our investigation and will provide more updates here.
In the meantime, if you listed or traded NFTs on Magic Eden’s EVM marketplace before we shut it down, revoke this contract:
Limit Break: Payment Processor (V2)
0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
Go through our instructions here:
Ethereum → filter that address → revoke every NFT “approved for all” row
Repeat for the following chainsPolygon
Base
See also 0xQuit’s tweet on revocation for further reference also:
NOTE: Revoking does not return tokens that already moved.
Again, we will keep the community updated as we investigate further.
