Yuga Labs Floorsing Protocol Exploit: Whitehat Rescue of 68 NFTs
On June 8, Yuga Labs (BAYC/CryptoPunks team) talk say dem run one unprompted whitehat operation to stop one active Flooring Protocol exploit. The move rescue 68 blue-chip NFTs worth over $500k and stop further drains from the affected Flooring pools, using Yuga Labs own OTC desk funds.
CEO Michael Figge post list of the recovered assets: 29 BAYC, 4 Mutant Ape Yacht Club, 1 Bored Ape Kennel Club, 2 CryptoPunks, 1 Azuki, 2 Elementals, 26 Captains, 1 Moonbird, and 2 Doodles. The on-chain recovery dem lead by 0xQuit and fund through GrailsOTC.
0xQuit say the Flooring Protocol exploit come from accounting edge case: small WETH amount fit convert to inflated fpToken balance because of “ghost ownership” from packed ownership/indexing logic, then arithmetic underflow make am worse and give the attacker way more balance than the record. After review, the team find another vulnerability path and them escalate with emergency withdrawals to protect other at-risk pools.
Flooring Protocol architect (@0xFreeLunch) blame the matter on gas-saving bit-level packed code wey fail when token IDs go outside expected ranges. Some NFTs still dey under attacker control, and users urge make dem no deposit until verified fix land.
For traders, the immediate impact na more sentiment-driven than structural. Main takeaway be say this Flooring Protocol exploit no trigger confirmed NFT-wide liquidation cascade, but “legacy” DeFi permissioning and accounting bugs fit still quickly change risk conditions for any connected pool.
Neutral
Yuga Labs whitehat response limit the spread by moving 68 NFTs and stopping further drains, which reduce the chance say big liquidation pressure for the NFT market. But when dem talk say the Flooring Protocol exploit involve accounting "ghost ownership" plus arithmetic underflow, and say another vulnerability path con show, e show say DeFi contract risk still dey—especially for pools wey connect. Traders fit see short-term sentiment calm down, but the underlying risk story still dey, so impact dey more near neutral than bullish.