Security Alert: PPV2 Vulnerability Attacks Still Ongoing, Users Should Immediately Revoke Relevant Authorizations

Yuga Labs' Vice President of Blockchain Quit issued a reminder that the Payment Processor V2 (PPV2) vulnerability attack remains ongoing. Even if users were not impacted in the September 25 incident, their assets could still be at risk as long as relevant authorizations have not been revoked, and he once again urged users to revoke authorizations immediately. Quit noted that roughly an hour ago, the address 0x3B13...3327 lost 0.15246 WETH in the subsequent block after accepting an offer and receiving funds. The attacker allocated 99% of the amount as a tip to Titan Builder, retaining only around 0.0015 ETH, making fund retrieval via front-running nearly impossible. Quit recommended that OpenSea consider checking whether users hold risky authorizations before they accept offers and requiring prior revocation; when transferring NFTs, the platform should also verify if the receiving address has relevant authorizations.