Security Alert: Users should immediately revoke Blur contract authorizations to guard against potential vulnerabilities and upgrade risks.

Yuga Labs’ Vice President of Blockchain Quit has issued a reminder that following Blur’s announcement of plans to shut down its website frontend, users should immediately revoke authorizations to Blur’s smart contracts. Quit stated that he has inspected Blur’s current contracts and found no exploitable vulnerabilities, but noted these contracts support upgrades, meaning malicious logic could still be introduced in future iterations. He pointed out that NFTs worth tens of millions of dollars remain authorized to Blur’s contracts, and the security of these assets effectively depends on the Blur team’s operational integrity. The executive added that the Blur team appears to be in the process of disbanding, so he recommends users revoke authorizations via tools such as revoke.cash to mitigate risks from potential contract vulnerabilities or future upgrades. Quit also referenced last month’s exploit of Magic Eden-related contracts, which resulted in millions of dollars in losses, noting he assisted in recovering a significant portion of those funds. That incident underscores the risks of retaining contract authorizations—especially as attackers gain access to more powerful vulnerability-detection tools. Yuga Labs CEO Figge also issued a reminder, emphasizing that Blur’s contracts are upgradeable, and users should revoke authorizations to avoid future security issues.