On September 25, a wallet linked to pseudonymous security researcher Quit pulled 3,832 NFTs out of hundreds of unrelated wallets, the first visible sign of a rescue operation built around a bug in LimitBreak’s Payment Processor V2 contract.
The operation eventually relocated 23,155 NFTs worth nearly $6 million, while a separate exploit path left 660 WETH unrecovered.