Talis Protocol Exploit Steals About 5,700 NFTs

Talis Protocol said an attacker exploited vulnerabilities in its Injective marketplace and auction contracts on 31 October, stealing about 5,700 NFTs held in custody and selling them through public collection offers. Talis Protocol has halted new listings and auctions on Injective and, as a precaution, paused new activity on other chains while it reviews fixes. The team has returned more than 26,000 NFTs held in its contracts to their original owners and logged the affected NFTs, previous owners and executed bids. It is preparing a plan to return the stolen NFTs and compensate buyers whose offers were executed. No broader market losses have been reported; a full post-mortem is expected later. The exploit could add to security concerns around NFT marketplaces and Injective, but its direct price impact on INJ remains unclear.
Neutral
The exploit creates reputational and ecosystem-security concerns for Injective, and news of a marketplace breach can prompt short-term caution among traders. However, the incident targeted Talis Protocol’s marketplace and auction contracts; the reports do not describe a vulnerability in Injective itself or broader market losses. The pause in activity and the return of more than 26,000 NFTs may help contain the fallout, while plans to recover the stolen NFTs and compensate affected buyers could ease concerns if carried out. In the short term, INJ could face sentiment-driven volatility, but there is no reported direct loss or clear fundamental change to Injective that establishes a sustained price direction. Longer-term effects will depend on the investigation, remediation and whether confidence in Injective-based applications recovers. On the available information, the expected direct price impact on INJ is neutral.