Yuga Labs Blockchain vice president Quit says PPV2 the vulnerability attack is ongoing
BIBIBI
AT A GLANCE
Quit reminds users that PPV2 the vulnerability attack is ongoing, and users who have not revoked the relevant approvals should do so immediately.
Article
Security Alert:PPV2 The vulnerability attack is ongoing, and users should immediately revoke the relevant approvals
BlockBeats reports that September 30，Yuga Labs blockchain vice president Quit posted a reminder that Payment Processor V2（PPV2) The vulnerability attack is ongoing. Even if users were not affected by the incident involving September 25, their assets may still be at risk as long as the relevant approvals have not been revoked. Users are again reminded to immediately revoke the approvals.
Quit said that approximately 1 hours ago, address 0x3B13...3327 lost 0.15246 WETH. The attacker paid 99%as a tip to Titan Builder, retaining only approximately 0.0015 ETH, making it nearly impossible to recover the funds through a frontrunning transaction.
Quit suggested that OpenSea consider checking whether risky approvals still exist before users accept offers and require them to be revoked first. When transferring NFT, it should also check whether the receiving address retains the relevant approvals.
Original link https://m.theblockbeats.info/flash/369658
Key points
01
BlockBeats reports that September 30，Yuga Labs blockchain vice president Quit posted a reminder that Payment Processor V2（PPV2) the vulnerability attack is ongoing.
02
Quit said that even if users were not affected by the incident involving September 25, their assets may still be at risk as long as the relevant approvals have not been revoked.
03
Quit said that approximately 1 hours ago, address 0x3B13...3327 lost 0.15246 WETH。
04
Quit said that the attacker paid 99%as a tip to Titan Builder, retaining only approximately 0.0015 ETH。
05
Quit suggested that OpenSea check for risky approvals before users accept offers and require them to be revoked first; when transferring NFT, it should also check whether the receiving address retains the relevant approvals.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
An approval is equivalent to allowing a contract to operate a user's assets. According to Quit's reminder, if PPV2 the relevant approvals remain valid, users' assets may still be at risk even if they were not previously affected. The direct response given in the original report is to immediately revoke the relevant approvals and check the approval status of the relevant addresses before accepting offers or transferring NFT.
Why it matters to readers
The original report said that the attack is ongoing and reported a loss of 0.15246 WETH, so users who have not yet revoked the relevant approvals may continue to face the risk of asset loss.
If you have used services involving PPV2, carefully check and revoke the relevant approvals. If you are unsure how to do so, do not hastily accept offers or transfer NFT。
Risks and unknowns
The material is BlockBeats' account of Quit's post and does not provide independent on-chain verification results or an official vulnerability announcement.
PPV2 The specific mechanism, impact scope, and fix status of the vulnerability are not stated.
The material does not confirm how many addresses still retain the relevant approvals or have suffered losses.
It remains unclear whether OpenSea has implemented the approval-checking measures suggested by Quit.
Related Developments
Loading event timeline…
Related concepts
Asset approvals
This term is not in the glossary yet. Browse related concepts in the glossary.
