A vulnerability in Limit Break’s Payment Processor marketplace contracts was used in a September 25, 2026 incident involving zero-price NFT transfers on Ethereum and related activity on ApeChain. An unidentified third party first exploited the flaw, after which a white-hat team moved exposed assets into custody wallets. Quit, Vice President (VP) of Blockchain at Yuga Labs, said 23,155 NFTs were relocated for safekeeping and that 660 WETH was lost before it could be protected. Those figures remain unaudited claims. Revoke.cash, the live public checker of record after Blockaid removed its original incident thread, listed $0 confirmed stolen and 3,832 zero-ETH transfers at 10:39 UTC. Limit Break had not issued an incident statement by that time, and the vulnerability’s root cause remained undisclosed. Payment Processor is an NFT exchange protocol for ERC-721-C and ERC-1155-C tokens, Limit Break’s royalty-enforcing versions of the ERC-721 and ERC-1155 standards. Its Ethereum V2 contract was previously used by Magic Eden’s Ethereum marketplace, but shutting that marketplace did not revoke operator approvals (on-chain permissions allowing a contract to transfer tokens from a collection). Wallets that approved Payment Processor V2 or ApeChain’s V3 contract were urged to revoke those permissions. Conflicting asset counts and valuations reflect different stages and methods of measuring the incident, while the final scope, any maliciously taken NFTs, the WETH loss and the technical cause remained unresolved.