Injective NFT market Talis contract was exploited, approximately 5,700 NFTs were sold

The Cosmos ecosystem NFT market Talis Protocol stated on October 31st on X that attackers exploited vulnerabilities in its market and auction contracts on Injective, resulting in approximately 5,700 hosted NFTs being withdrawn and sold into public collection bids.

Talis indicated that it has suspended new listings and auctions on Injective and will return over 26,000 NFTs in the contract to their holders. As a precaution, new listings and auctions on other chains have also been suspended. Users are advised not to buy, list, or bid on Talis until the fixes are confirmed safe, although they can still cancel unfilled bids. If listings or auctions disappear, users can check their wallets.

The project stated that the fixed contracts are ready and are undergoing pre-deployment review, with a timeline to be announced later. The team has recorded each affected NFT, the original holders before the theft, and each transaction bid, and is formulating a plan to return the NFTs to their original holders and compensate the bidders. A list of affected NFTs will be published, and users are advised not to purchase these NFTs during this period. Talis also stated that it will not request wallet connections via private messages to claim any content, and a complete post-incident explanation will be released later. RootData shows that Talis Protocol was established in 2021 and completed a $2.35 million private fundraising round in November of the same year.