@blockaid_ traced the issue to Limit Break’s Payment Processor V2, where old operator approvals can still be used to transfer NFTs for 0 ETH. Canceling listings or a master nonce does not remove that permission @0xQuit says assets moved to a rescue wallet and are safe and will