Flooring Protocol Exploit TLDR:
- An exploit on Flooring Protocol used a bit-packed token ID collision to create "ghost ownership", tricking the protocol into thinking an attacker owned NFTs they didn't
- This caused balance underflows, giving the attacker near-infinite fpTokens, which they dumped to drain liquidity pools
- A follow-up opportunist then scooped cheap tokens from the wrecked pools and redeemed them for real NFTs
-
@coffeedev discovered a second related exploit path that put even more high-value collections (BAYC, CryptoPunks) at risk
- $500,000 in NFTs saved: 29 BAYC, 4 MAYC, 2 CryptoPunks, 1 Azuki, 2 Elementals, 26 Captains, 1 Moonbird, 2 Doodles, 1 BAKC
- Assets are now in Yuga Labs custody, will be returned to rightful owners in coming weeks
- Exploiters still hold some NFTs, situation is NOT fully resolved