Limit Break on Ethereum is under active attack, with approximately $1.7 million in NFTs stolen across three transactions. Attackers are exploiting the Payment Processor V2 contract to impersonate NFT holders and acquire previously approved assets at zero cost. Security firm Blockaid warns that the exploit remains ongoing. Users who have granted operator approval to Payment Processor V2 are urged to revoke permissions immediately, as this specific authorization is being leveraged to drain funds.