Gondi Suffers $230,000 NFT Heist Due to Contract Flaw

Gondi, an NFT liquidity and lending platform, suffered a security breach that led to the theft of 78 valuable digital assets.

The incident was caused by a flaw in the 'Purchase Bundler' function of a contract deployed on February 20. The issue allowed attackers to withdraw NFTs without proper verification of ownership or borrowing rights.

Data from Etherscan shows that the stolen NFTs were transferred through around 40 transactions, including 44 Art Blocks tokens and several other rare collections.

Gondi has taken steps to address the situation by disabling the affected feature and deploying a fix. The platform's team is working with affected users to compensate them for their losses or provide comparable NFTs as replacement.