I owe everyone a proper technical breakdown of the exploit of PaymentProcessorV2 and the rescue that followed.
The short version: Payment Processor trusted an ERC-2771 style “original sender” supplied through a trusted forwarder.
That sender could be forged.
1/🧵
I've not seen a single person talk positively about this project.
@RealPapii was right to call them out last week and should've stuck to his guns.
Red flags galore.
Another wallet has returned stolen NFTs and I've just added the batch to nftsaresafu.xyz for claiming:
- 66 @artblocks_io
- 25 @HV_MTL
- 92 @10KTFshop Combat Gear
- 159 PUDGY PUPPETS
- 85 Aswang Tribe
- 67 Kitaro World
- 40 First Doge
- 19 Visions of the Void
- 16 Rough Ryders
- 2 AOI Engine
- 1 The Buns1 Mythic Seed
Beware of lowlife losers trying to further exploit victims by piggybacking the recent exploit to lure people onto piggyback phishing sites.
Use revoke.cash to revoke approvals, anything else somebody sends you is probably a scam.
Shutout to the legend @0xQuit for being a good monke who saved and keeps saving so many valuable NFTs. Accept this artwork I drew of your @BoredApeYC ape. Stay bored. We’re grateful for good people like you 🦍
I thought it was gone forever, @0xQuit you are the mo’fkn goat.
An OG I minted back in ‘22, thought it was gone into the abyss… but people like you @0xQuit shows there is good people out there. You deserve the world man, thank you for saving this guy 🙏🏼❤️
#NewProfilePic
After what happened recently in the NFT market and the great work of @0xQuit , I felt it was the moment for me to join the @BoredApeYC family with my first mutant.
Ape follows ape still a thing?
Just got word from another address that they'll be participating in the recovery.
Mostly Pirates of Fukushu, Chibi Heads, V1 Phunks and 10KTF combat gear.
If your NFTs are in 0xB6fCF1020833243c8a51721bdA1f2429654A21B1, they'll be home soon.
Perhaps @opensea can force revocation before accepting offers if there are approvals open.
Same goes for transferring NFTs: should check the recipient to ensure there's not an approval there.
cc @chrismaddern
ATTENTION FWAP S2 NFT DEPOSITORS:
Please withdraw your NFTs or migrate to S3 ASAP.
Withdrawing NFTs frees up liquidity for ETH depositors to migrate (or withdraw) as well.
S3 allows ETH holders to force NFT withdrawals, S2 does not have this feature.
Without oSnipe this whole rescue likely would not have happened.
and instead some bad actor would have the portfolio of the safu wallet.
thankful for my community.
you can join at oSnipe.app/purchase
In January, I quit my full-time job to help grow a business in Australia. Giving up a steady paycheck, with no idea when I'd next get paid, whilst supporting my young family meant I needed my trading to stay on point.
I lost two years of savings and managed to get most of it back, thanks to @0xQuit
Special thanks to @AdamWeitsman , @Dannyb0yyy_ , @OxSimpleFarmer@One_Eyed_Kevie , and @allodev for helping me during this time of panic. Appreciate you all 💪💪
Also huge thanks to everyone else that checked in and offered support!
@0xQuit reached out on my behalf & that white hat sent most of my ETH back 🙏
So grateful for him today
Appreciate all of you right now.
Also, thanks to the best club in the world BAYC & @RealPapii for helping to get Quits attention while he was busy saving all of your dumb asses.
Got some Super Punk World's in the recent nft hack, if they're yours you can have them back for free. Just DM me to confirm where to send them. @0xQuit
I may not have an ape but in my heart I am one 🦍
The Yuga devs didn’t have to help us little guys but they did 🙏
Many Hens & Frogs saved! 🥳
Little guys contribute to the space more than you think
Join Yuga if you can - they look out for each other in times like these 💕