Talis Protocol paused new listings and auctions on Injective, saying an attacker exploited bugs in its marketplace and auction contracts and took about 5,700 NFTs held in escrow. The announcement was timestamped Saturday, Oct. 31, at 6:50 p.m. ET (22:50 UTC).
Talis also paused new listings and auctions on its other chains as a precaution. Its marketplace lists hubs on Xion and Orai, and users could still cancel open offers. Talis Protocol warned users, “Please don’t buy, list or bid on Talis until we confirm it’s safe.”
More than 26,000 NFTs have been returned from Talis’ contracts to their owners. The project did not specify whether that count includes any of the NFTs taken in the exploit. Talis is developing plans to return affected NFTs and compensate offer makers, and plans to publish a list of affected NFTs.
Patched contracts are ready and under review before deployment, but no deployment schedule has been provided. Talis plans to publish a postmortem.
