Talis Protocol pauses marketplace after contract exploit drains 5,700 NFTs
Injective-based NFT marketplace Talis Protocol suffered an exploit in its marketplace and auction contracts, allowing an attacker to take roughly 5,700 escrowed NFTs and liquidate them for about $3,100.
Talis Protocol, an NFT marketplace operating on Injective, disclosed that an attacker exploited a bug in its marketplace and auction contracts on Oct. 31, 2026. The vulnerability enabled the attacker to drain roughly 5,700 escrowed NFTs and immediately dump them into open collection offers.[1][3]
On-chain data reviewed by The Block showed the attacker netted approximately 445 INJ, worth around $3,100. The vast majority of the seized assets were sold to automated bid bots for nominal amounts, recording a median sale price of about 2 cents. The attacker quickly swapped the proceeds into USDT and bridged them to the Ethereum blockchain within roughly an hour of the exploit.[1]
Following the breach, Talis Protocol paused listings and auctions across the platform. The team stated that it intends to work on recovering the affected NFTs and returning them to their original owners.[1][2][3]
Key facts
- An attacker exploited a bug in Talis Protocol's marketplace and auction contracts on Injective on Oct. 31, 2026.
- Approximately 5,700 escrowed NFTs were taken and sold into open collection offers.
- The exploit netted the attacker around 445 INJ, valued at roughly $3,100.
- Most drained NFTs sold to bid bots for pennies, with a median sale price of around 2 cents.
- The proceeds were swapped into USDT and bridged to Ethereum within roughly one hour.
- Talis Protocol paused listings and auctions and stated plans to return the NFTs to their original owners.
Sources · 3 sources
- TB
The Block@TheBlockCoPost on X ·
THE BLOCK: Talis Protocol, an NFT marketplace on Injective, said an attacker exploited a bug in its marketplace and auction contracts on Saturday, taking about 5,700 escrowed NFTs and selling them into open collection offers. Onchain data reviewed by The Block shows the attacker netted about 445 INJ, or roughly $3,100. Most of the NFTs sold to bid bots for pennies, with a median sale of about 2 cents. The proceeds were swapped to USDT and bridged to Ethereum within about an hour of the exploit. Talis has paused listings and auctions and says it plans to return the NFTs to their original owners.
Open source - CB
Crypto BriefingArticle ·
Talis Protocol pauses listings after NFT exploit nets attacker about $3,100 The exploit highlights vulnerabilities in NFT marketplaces, prompting a need for enhanced security measures and trust restoration in digital asset platforms. The post Talis Protocol pauses listings after NFT exploit nets attacker about $3,100 appeared first on Crypto Briefing .
Open source - CN
crypto.news@cryptodotnewsPost on X ·
JUST IN: Talis Protocol exploit drains 5,700 escrowed NFTs, with attacker netting about $3,100 The Injective-based marketplace says a bug in its auction and marketplace contracts enabled the theft; it has paused listings and auctions and plans to return the NFTs to their original owners.
Open source