On October 31, Talis Protocol detected an exploit of a security vulnerability in its Injective market and auction contracts. The attacker used it to steal approximately 5,700 escrowed NFTs, then transferred the assets out through a sequence of public offers. In response, the platform immediately suspended new listings and auction activity on the Injective network and began an in-place return process for the more than 26,000 NFTs held in the contracts.
New listings and auctions on other chains have also been suspended, but users can still cancel existing offers. The patched smart contracts are now undergoing a security review before deployment and have not yet gone live again.
Talis Protocol is pursuing two remediation measures: returning all stolen NFTs to their original owners and developing a compensation plan for bidders whose offers were accepted. The overall response is still underway.
#On-chain
New listings and auctions on other chains have also been suspended, but users can still cancel existing offers. The patched smart contracts are now undergoing a security review before deployment and have not yet gone live again.
Talis Protocol is pursuing two remediation measures: returning all stolen NFTs to their original owners and developing a compensation plan for bidders whose offers were accepted. The overall response is still underway.
#On-chain
