NFT platform Gondi suffers contract vulnerability attack, loses $230,000, promises full compensation to affected users

Gate News reports that on March 10th, NFT platform Gondi was recently targeted by a smart contract vulnerability attack, resulting in the theft of approximately 78 NFTs and a loss of about $230,000. According to an official Gondi announcement, the attack was related to the new version of the Sell & Repay contract deployed on February 20th, which had a logical flaw in its Purchase Bundler function that failed to properly verify whether the caller was the legitimate owner or borrower of the NFT. The stolen NFTs include 44 Art Blocks, 10 Doodles, 2 Beeple works, and others. Gondi stated that they have taken control of the situation, and the Sell & Repay feature remains disabled during the repair period. Other buying, selling, quoting, and trading functions are operating normally, and platform activities can safely resume. The team is working diligently to compensate affected users, has contacted interacting users, recovered some NFTs purchased unknowingly by buyers and returned them to the original owners, and is using protocol fees to buy comparable works from the series to offset the losses. They are also actively negotiating with parties related to the irreplaceable 1/1 NFTs that were lost.