# About 5,700 NFTs stolen in Talis exploit on Injective Author: Hatice Ertaş Language: English Published: 2026-11-01T16:45:01+03:00 Updated: 2026-11-01T16:45:01+03:00 ![Conceptual gallery with empty display frames and a colorful collectible panel behind protective glass.](https://kriptometa.com/uploads/talis-te-saldiri-yaklasik-nft-calinip-satildi-8e2dc35fd6bd_article.webp) ## Key takeaways - Talis halted new listings and auctions on Injective and took the same precaution on other chains. - The team returned more than 26,000 NFTs from contracts to their owners. It is preparing a plan for stolen assets. - The team is reviewing fixes and asks users not to buy, list or bid until it confirms the service is safe. Talis said an attacker exploited its Injective contracts on October 31, stealing about 5,700 NFTs and selling them into existing collection offers. [NFT](https://kriptometa.com/en/glossary/nft) marketplace Talis said an attacker exploited a flaw in its marketplace and auction [contracts](https://kriptometa.com/en/glossary/smart-contract) on Injective on October 31. In its [incident statement](https://x.com/ProtocolTalis/status/2116664033457680705), the team said the attacker stole about 5,700 NFTs held in escrow and sold them into buyers’ existing collection offers. Talis’s count refers to NFTs; the number of affected people or [wallets](https://kriptometa.com/en/glossary/crypto-wallet) is unknown. The team has not disclosed the total dollar loss, a complete list of affected collections or technical details of the flaw. It says a full incident report will follow. ## Listings halted as more than 26,000 NFTs were returned Talis said it [halted new listings and auctions](https://x.com/ProtocolTalis/status/2116664036138025405) on Injective and returned more than 26,000 NFTs from its contracts to their owners. It asked users whose listings or auctions disappeared to check their wallets. The team has not reported recovering the roughly 5,700 NFTs the attacker stole and sold. The team also [paused new listings and auctions on other chains as a precaution](https://x.com/ProtocolTalis/status/2116664039107637467) while rolling out fixes. It reported theft from Talis contracts on Injective, without reporting theft on the other chains. The pause concerns Talis’s listing and auction services; no halt of the Injective [blockchain](https://kriptometa.com/en/glossary/blockchain) was announced. Talis asks users not to buy, list or bid until it confirms the service is safe. It says unfilled open offers can still be canceled. The offer mechanics below come from older user documentation and do not announce a reopening or invite users to trade now. > Talis’s official post reporting that an attacker stole and sold about 5,700 NFTs on October 31. > > [Talis’s statement on X](https://x.com/ProtocolTalis/status/2116664033457680705) ## What does a collection offer buy? Under Talis’s [secondary market documentation](https://talis-protocol-1.gitbook.io/talis-protocol/getting-started/trading-nfts/secondary-market), a buyer makes a collection offer to buy any NFT from a specified collection. Anyone holding a token from that collection can accept. If the buyer bids for one specific NFT, only that token’s owner can accept. The buyer deposits the offer money in the offer contract. The documentation says they can cancel to recover those funds or wait for a seller to accept. The seller’s NFT held for sale and the buyer’s deposited money are separate assets. By accepting existing offers, the attacker sold stolen NFTs to buyers who had already placed bids. Talis is preparing a remedy for both the owners whose NFTs were taken and the buyers whose offers were filled. A user can cancel an offer that remains open; doing so does not reverse a completed sale. The team did not disclose evidence that the buyers acted with the attacker. ## Talis prepares a plan for owners and buyers Talis says it [recorded every affected NFT, its owner before the theft and every filled offer](https://x.com/ProtocolTalis/status/2116664043566191069). It is preparing a plan to return NFTs to their original owners and compensate offer makers. The team said it would publish a list of affected NFTs and asked users not to buy them in the meantime. The team has not announced returning the stolen NFTs or paying offer makers. It has not explained how it would recover NFTs from buyers, fund compensation or schedule those steps. Talis has [prepared code to fix the contracts](https://x.com/ProtocolTalis/status/2116664041032626506) and is reviewing it before deployment. It says it will share a timeline when available. It has not announced deploying the fix, completing an independent audit or setting a reopening time. It also says it [will never send direct messages or ask users to connect a wallet to claim anything](https://x.com/ProtocolTalis/status/2116664045604426067). Updates will come only from its official account. Before following a refund link sent privately, users can [check the announcement through that account](https://kriptometa.com/en/crypto-phishing-fake-token-checks) to help spot a fake claim.