Hack history / 2026 / Hack or exploit
Limit Break Payment Processor
Hack or exploit on Sep 24, 2026 · Token Approval Abuse
IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 2 SOURCES
Lost
$1.8M
sources: $1.8M to $2.8M
Returned
none listed
as the sources state it
Rank
#727
among thefts by dollars lost
What happened
A vulnerability in Limit Break’s Payment Processor allowed an attacker to abuse users’ existing token and NFT approvals to transfer assets without a legitimate marketplace purchase. Payment Processor V2 on Ethereum was exploited first, and V3 contained the same vulnerability. Limit Break paused V3 where possible, while whitehats transferred vulnerable NFTs to safe custody because V2 could not be paused and ApeChain V3 could not immediately be paused. The same underlying approval flaw could be used in reverse against WETH approvals, resulting in 660 WETH being stolen along with other tokens before whitehats could secure it
In review: sources disagree on the loss.
Details
- Date
- Sep 24, 2026
- Kind
- Hack or exploit
- Method
- Token Approval Abuse
- How in
- Smart contract bug
- Target
- NFTfi
- Chains
- Ethereum, ApeChain, Polygon, Base
Reported by
Related incidents
GANA Payment 2025 · Hack or exploit · $3.1M
Aperture LM 2026 · Hack or exploit · $3.7M
Ekubo 2026 · Hack or exploit · $1.4M
ZetaChain 2026 · Hack or exploit · $334K
Gondi V3 2026 · Hack or exploit · $230K
Aperture LM 2026 · Hack or exploit · $3.7M
Ekubo 2026 · Hack or exploit · $1.4M
ZetaChain 2026 · Hack or exploit · $334K
Gondi V3 2026 · Hack or exploit · $230K
Cite this page
SwanBluechip, "Limit Break Payment Processor hack, Sep 24, 2026: $1.8M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht4861ce82f2/ (data as of 2026-11-01).