About 5,700 Talis NFTs unauthorizedly withdrawn; new registrations and auctions suspended

Talis Protocol, an NFT marketplace built on Injective, disclosed on October 31 that a vulnerability in its Injective-based marketplace and auction contracts was exploited, resulting in the unauthorized withdrawal of roughly 5,700 NFTs from escrow. The protocol has suspended new listings and auctions in response. The attacker sold the extracted NFTs into existing collection-wide buy offers, netting approximately 445 INJ, or about $3,100 — a figure reflecting only the sale proceeds, not the total value of the stolen NFTs or the losses borne by owners. The incident underscores smart contract risk on Injective-based NFT infrastructure and the exposure of escrowed assets in marketplace contracts. Watch for whether Talis recovers the NFTs, compensates affected users, reopens listings and auctions, and whether the attacker moves the stolen assets.