Digital Asset
Intelligence
Security Incident · NFT

Gondi V3 Smart Contract Vulnerability: $230.00K Reported Loss

·Historical incident record

Incident Overview

Gondi V3 NFT lending protocol’s “Sell & Repay” contract (Purchase Bundler feature) was exploited. The attacker bypassed ownership checks due to an access control flaw and stole escrowed NFTs (approximately 78 NFTs) worth ~$230,000. The team disabled the vulnerable contract and committed to compensating affected users; other platform functions remained unaffected.

Sources & References

Original incident referencehttps://www.theblock.co/post/392909/nft-platform-gondi-moves-users-whole-230000-contract-exploit (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 50,101
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 40,000
  3. Incident date
    Target

    SuperRare

    Attack methodContract Vulnerability
    Reported loss$ 730,000
  4. Incident date
    Attack methodReserve Manipulation Attack
    Reported loss$ 242,000
  5. Incident date
    Target

    Molt EVM

    Attack methodSmart Contract Vulnerability
    Reported loss$ 127,000