Talis Protocol NFT Contracts on Injective Exploited, About 5,700 NFTs Sold

What happened

Attackers exploited Talis Protocol’s marketplace and auction contracts on Injective, withdrawing and selling about 5,700 NFTs held in custody. Talis paused new listings and auctions, returned more than 26,000 other NFTs to owners, and is reviewing a patched contract before deployment.

Confirmed

Global impact / market context

Paused listings and auctions stop Talis from earning activity-related revenue on Injective and other chains. Users are told not to trade through Talis until the fix is confirmed secure, while returning stolen NFTs and compensating offer-makers could require resources and delay normal marketplace operations.

Analyst inference

The article reports a contract exploit and planned remediation, but gives no loss valuation, token-price response, or confirmed compensation amount. The direct business effects described are paused trading functions and work to return stolen NFTs and compensate affected offer-makers.

Analyst inference

What to watch

1. Talis says its patched contract is under review before deployment; the team plans to announce a deployment timeline later, and users are advised to wait for security confirmation. Confirmed
2. The team is developing a plan to return affected NFTs to original owners and compensate offer-makers, and plans to publish a list identifying the affected NFTs. Proposed
3. A full postmortem could clarify how the contracts were exploited and whether the repair addresses the weakness, informing when Talis can resume activity across its marketplaces. Analyst inference

Evidence

• binance.com