A wallet linked to pseudonymous security researcher Quit moved 3,832 NFTs from hundreds of unrelated wallets on September 25 as part of a white-hat operation (authorized effort to secure assets) responding to a bug in LimitBreak’s Payment Processor V2 contract. The operation ultimately relocated 23,155 NFTs valued at approximately $6 million. Owners will be able to claim the assets after revoking vulnerable approvals. The flaw also allowed WETH, a token representing Ether on Ethereum-compatible networks, to be stolen in reverse, leaving 660 WETH unrecovered and valued by Quit at about $1.7 million. The NFT incident occurred around the same time as a Bitget breach in which hackers moved more than $351 million from some hot and warm wallets, while cold storage remained untouched. Bitget chief executive Gracy Chen attributed the loss to a compromised backend that spoofed transaction data rather than a stolen private key and said customers would be reimbursed from the exchange’s $464 million user protection fund. More than 100 million XRP worth over $158 million represented the largest single portion of the stolen cryptocurrency.