Yuga Labs Executive warns users to revoke Blur contract approvals, citing upgradeability and subsequent risks

Article

Security reminder: Users should immediately revoke Blur contract approvals to guard against potential vulnerabilities and upgrade risks

BlockBeats reports,October 13，Yuga Labs Blockchain vice president Quit posted a reminder that after Blur announced it would shut down its website frontend, users should immediately revoke approvals granted to Blur contracts. He said that he had inspected Blur’s current contracts and found no exploitable vulnerabilities, but these contracts support upgrades and could still introduce malicious logic in the future.

Quit said that the total value of assets currently still approved for Blur contracts is in the tens of millions USD-level NFT approvals remain open to Blur contracts, and the security of these assets effectively depends on the Blur team’s own operational security. He believes the team currently appears to be disbanding and therefore recommends that users revoke approvals through revoke.cash or similar tools to guard against potential contract vulnerabilities or subsequent upgrade risks.

Quit also said that contracts related to Magic Eden were exploited last month, involving several million USD, and that he helped recover a considerable portion of the funds. This incident highlights the risks of retaining contract approvals, especially as attackers gain more powerful vulnerability-discovery tools.Yuga Labs CEO Figge also posted a reminder that Blur contracts are upgradeable and that users should revoke approvals to avoid future security issues.

Original link https://m.theblockbeats.info/flash/371459

Key points

BlockBeats said that after Blur announced it would shut down its website frontend, Quit reminded users to immediately revoke approvals granted to Blur contracts.
Quit said that he found no exploitable vulnerabilities when inspecting Blur’s current contracts, but these contracts support upgrades and could still introduce malicious logic in the future.
The total value currently still reaches tens of millions USD-level NFT approvals granted to Blur contracts.
Quit recommends that users revoke approvals through revoke.cash or similar tools.
Quit mentioned that contracts related to Magic Eden were exploited last month, involving several million USD。
Yuga Labs CEO Figge also warned that Blur contracts are upgradeable and that users should revoke approvals.

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

Contract approval is equivalent to allowing a contract to operate assets within a certain scope. Even if no vulnerability has been identified at present, future code or permission changes may increase risk if the contract can be upgraded.

Why it matters to readers

The approvals that remain open to Blur contracts NFT may face potential contract vulnerabilities or subsequent upgrade risks.

If you have previously authorized Blur to operate NFT, you can learn about approval-revocation tools and monitor contract upgrades and the project’s official operational status.

Risks and unknowns

The evidence does not provide results from an independent audit, so it is impossible to confirm whether Blur’s contracts are currently secure.
Whether malicious logic will be introduced in the future has not occurred or been substantiated.
The claim that the Blur team appears to be disbanding has not been officially confirmed by the evidence.
The evidence does not state the scale of users who revoked approvals, nor whether any Blur-related assets have already been transferred abnormally.

Yuga Labs Executive warns users to revoke Blur contract approvals, citing upgradeability and subsequent risks

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center