Security Alert: PPV2 Vulnerability Attacks Continue, Users Should Immediately Revoke Related Authorizations

BlockBeats news, September 30: Yuga Labs blockchain vice president Quit posted a reminder that the Payment Processor V2 (PPV2) exploit attack is still ongoing. Even if users were not affected in the September 25 incident, as long as the relevant approvals have not been revoked, their assets may still be at risk, and users are once again reminded to revoke approvals immediately.

Quit said that about 1 hour ago, address 0x3B13...3327 lost 0.15246 WETH in the next block after accepting an offer and receiving funds. The attacker paid 99% of it as a tip to Titan Builder and kept only about 0.0015 ETH, making it almost impossible to rescue the funds through front-running.

Quit suggested that OpenSea could consider checking whether users still have risky approvals before they accept offers and require them to revoke first; when transferring NFTs, it should also check whether the receiving address still has relevant approvals.