Talis halts NFT listings after attacker exploits Injective contracts and steals 5,700 escrowed NFTs.
Security & Exploits ·
Talis, an NFT marketplace, suspended new listings after an attacker exploited smart contracts on Injective and absconded with 5,700 escrowed NFTs. The incident highlights vulnerabilities in how digital assets are held during transactions on the blockchain.
The exploit targeted Injective's contract layer, where NFTs were held in escrow pending completion of sales. By compromising this mechanism, the attacker was able to withdraw the assets without authorization. The exact vector and timeline of the breach remain unclear, as do details on whether any funds were recovered or what security measures failed.
The broader impact on Talis users and whether the marketplace plans to restore full functionality is not yet disclosed. It is also unknown whether Injective itself issued guidance or patches in response, or whether other platforms using similar escrow patterns face comparable risk.