Talis Protocol said an attacker exploited vulnerabilities in its Injective marketplace and auction contracts on Oct. 31, stealing about 5,700 escrowed NFTs and selling them through public collection offers, according to a BlockBeats report citing the platform.
Platform response
Talis said it suspended new listings and auctions on Injective. It also said more than 26,000 NFTs still held in the contracts would be returned to their original holders. New listings and auctions on other chains were suspended as well, while existing offers could still be canceled.
Recovery plan remains in progress
The repaired contracts were under pre-deployment review, and Talis was developing a plan to return affected NFTs and compensate bidders whose offers had completed. The report did not provide transaction hashes, an attacker identity or an independent forensic assessment.
Source: BlockBeats English flash; Talis Protocol official statement, published Nov. 2, 2026.