{
    "id": 62946,
    "date": "2026-03-10T09:51:42",
    "date_gmt": "2026-03-10T02:51:42",
    "guid": {
        "rendered": "https:\/\/hbbgroup.net\/nft-lending-protocol-gondi-says-platform-secured-after-230k-exploit\/"
    },
    "modified": "2026-03-10T09:51:42",
    "modified_gmt": "2026-03-10T02:51:42",
    "slug": "nft-lending-protocol-gondi-says-platform-secured-after-230k-exploit",
    "status": "publish",
    "type": "post",
    "link": "https:\/\/hbbgroup.net\/en_us\/nft-lending-protocol-gondi-says-platform-secured-after-230k-exploit\/",
    "title": {
        "rendered": "NFT lending protocol Gondi says platform secured after $230K exploit"
    },
    "content": {
        "rendered": "<div data-testid=\"html-renderer-container\">\n<p>Nonfungible token platform Gondi said it has disabled the faulty smart contract that allowed a hacker to steal $230,000 worth of NFTs from the protocol, adding it is now in the process of compensating affected customers.<\/p>\n<p>Gondi <a title=\"https:\/\/x.com\/gondixyz\/status\/2031022009224712358\" href=\"https:\/\/x.com\/gondixyz\/status\/2031022009224712358\" target=\"_blank\" rel=\"nofollow noopener\">said<\/a> in an X post on Monday that the hacker exploited the \u201cSell &#038; Repay\u201d contract, which <a title=\"https:\/\/docs.gondi.xyz\/gondi-v3\/sell-and-repay\" href=\"https:\/\/docs.gondi.xyz\/gondi-v3\/sell-and-repay\" target=\"_blank\" rel=\"nofollow noopener\">lets<\/a> borrowers sell escrowed NFTs and automatically repay loans on the platform.<\/p>\n<p>Gondi noted that an updated version of that contract was deployed on Feb. 20 but didn\u2019t confirm how the hacker managed to exploit it. Gondi said no other part of the platform was affected by the exploit.<\/p>\n<p><a title=\"https:\/\/etherscan.io\/tx\/0x83bac5d4b222b97f9734637c072589da648941b8a884ce1a61324dc0449e6a06\" href=\"https:\/\/etherscan.io\/tx\/0x83bac5d4b222b97f9734637c072589da648941b8a884ce1a61324dc0449e6a06\" target=\"_blank\" rel=\"nofollow noopener\">Data<\/a> from Ethereum block explorer Etherscan shows 78 NFTs were stolen on Monday at about 8:12 am UTC. Blockchain security platform Blockaid <a title=\"https:\/\/x.com\/blockaid_\/status\/2030949740372734038\" href=\"https:\/\/x.com\/blockaid_\/status\/2030949740372734038\" target=\"_blank\" rel=\"nofollow noopener\">estimated<\/a> the damage to be $230,000.<\/p>\n<figure>\n<p><img decoding=\"async\" src=\"https:\/\/s3.cointelegraph.com\/uploads\/2026-03\/019cd58a-3535-7371-9b4c-d605b999bf74.png\"><\/p><figcaption><em>Source: <\/em><a title=\"https:\/\/x.com\/blockaid_\/status\/2030949740372734038\" href=\"https:\/\/x.com\/blockaid_\/status\/2030949740372734038\" target=\"_blank\" rel=\"nofollow noopener\"><em>Blockaid<\/em><\/a><\/figcaption><\/figure>\n<p>In an update, Gondi <a title=\"https:\/\/x.com\/gondixyz\/status\/2031103171808944443\" href=\"https:\/\/x.com\/gondixyz\/status\/2031103171808944443\" target=\"_blank\" rel=\"nofollow noopener\">said<\/a> its \u201cfocus has shifted entirely to making affected users whole\u201d and that Blockaid and an independent auditor have since reviewed the platform, concluding it to be safe to use.<\/p>\n<p>That includes repaying, renegotiating, refinancing loans and starting new loans in addition to buying, selling, trading and listing NFTs <a title=\"https:\/\/cointelegraph.com\/news\/rodeo-becomes-2nd-nft-platform-announce-closure-this-week\" href=\"https:\/\/cointelegraph.com\/news\/rodeo-becomes-2nd-nft-platform-announce-closure-this-week\">on the platform.<\/a><\/p>\n<p>Gondi said it has not yet deployed a fix to the Sell &#038; Repay contract, which has now been disabled.<\/p>\n<h2>Crypto Samaritans help Gondi recover NFTs<\/h2>\n<p>While Blockaid said the hacker had started selling some of the stolen NFTs, members of the <a title=\"https:\/\/cointelegraph.com\/features\/what-the-nft-paris-cancellation-says-about-the-current-state-of-the-nft-market\" href=\"https:\/\/cointelegraph.com\/features\/what-the-nft-paris-cancellation-says-about-the-current-state-of-the-nft-market\">NFT community<\/a> managed to recover and return <a title=\"https:\/\/cointelegraph.com\/news\/blue-chip-nfts-eth-retreat-cryptopunks-resilience\" href=\"https:\/\/cointelegraph.com\/news\/blue-chip-nfts-eth-retreat-cryptopunks-resilience\">Doodle, Aluminum Gazer,<\/a> Lil Pudgy and Servant of the Muse NFTs, Gondi noted.<\/p>\n<blockquote><p>\u201cWe are in active conversations on additional items and expect more to follow, including Taxmen.\u201d<\/p><\/blockquote>\n<p><template data-ct-widget=\"buzzsprout\" data-buzzsprout-podcast-id=\"2040516\" data-buzzsprout-episode-id=\"18518100\"><\/template><\/p>\n<p>Crypto researcher \u201cTinoch\u201d <a title=\"https:\/\/x.com\/tinoch\/status\/2030944315758039394\" href=\"https:\/\/x.com\/tinoch\/status\/2030944315758039394\" target=\"_blank\" rel=\"nofollow noopener\">noted<\/a> on X that one Gondi user, with wallet address \u201c0x8d1\u202647051,\u201d lost around <a title=\"https:\/\/cointelegraph.com\/news\/nft-market-cap-returns-pre-hype-levels-2021\" href=\"https:\/\/cointelegraph.com\/news\/nft-market-cap-returns-pre-hype-levels-2021\">$108,000 worth of NFTs,<\/a> accounting for nearly half of the protocol theft.<\/p>\n<p><em><strong>Related: <\/strong><\/em><a title=\"https:\/\/cointelegraph.com\/news\/magic-eden-winds-down-evm-bitcoin-nft-markets-to-focus-on-gambling\" href=\"https:\/\/cointelegraph.com\/news\/magic-eden-winds-down-evm-bitcoin-nft-markets-to-focus-on-gambling\"><em><strong>Magic Eden winds down EVM, Bitcoin NFT markets to focus on gambling<\/strong><\/em><\/a><\/p>\n<p>Gondi said it has already bought \u201ccomparable items\u201d from the same <a title=\"https:\/\/cointelegraph.com\/news\/logan-paul-sells-pokemon-card-record-16-million\" href=\"https:\/\/cointelegraph.com\/news\/logan-paul-sells-pokemon-card-record-16-million\">NFT collections<\/a> and transferred them to affected owners, and will continue to do so for any remaining cases.<\/p>\n<blockquote><p>\u201cWhile not the exact same piece, we believe this is a fair and meaningful resolution and are coordinating directly with each owner.\u201d<\/p><\/blockquote>\n<p><em><strong>Magazine: <\/strong><\/em><a title=\"https:\/\/cointelegraph-magazine.com\/whats-network-state-real-life-examples-big-questions\/\" href=\"https:\/\/cointelegraph-magazine.com\/whats-network-state-real-life-examples-big-questions\/\" target=\"_blank\" rel=\"nofollow noopener\"><em><strong>What\u2019s a \u2018Network State\u2019 and are there real-life examples? Big Questions<\/strong><\/em><\/a><\/p>\n<p><template data-type=\"markets_outlook\" data-name=\"subscription_form\" data-label=\"Subscription Form: Markets Outlook\"><\/template><\/div>\n<p>Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph\u2019s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently. Read our Editorial Policy <a href=\"http:\/\/cointelegraph.com\/editorial-policy\">https:\/\/cointelegraph.com\/editorial-policy<\/a><\/p>",
        "protected": false
    },
    "excerpt": {
        "rendered": "<p>Nonfungible token platform Gondi said it has disabled the faulty smart contract that allowed a hacker to steal $230,000 worth [&hellip;]<\/p>",
        "protected": false
    },
    "author": 5,
    "featured_media": 62949,
    "comment_status": "open",
    "ping_status": "open",
    "sticky": false,
    "template": "",
    "format": "standard",
    "meta": {
        "_acf_changed": false,
        "footnotes": ""
    },
    "categories": [
        220
    ],
    "tags": [],
    "class_list": [
        "post-62946",
        "post",
        "type-post",
        "status-publish",
        "format-standard",
        "has-post-thumbnail",
        "hentry",
        "category-tien-dien-tu"
    ],
    "acf": [],
    "_links": {
        "self": [
            {
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/posts\/62946",
                "targetHints": {
                    "allow": [
                        "GET"
                    ]
                }
            }
        ],
        "collection": [
            {
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/posts"
            }
        ],
        "about": [
            {
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/types\/post"
            }
        ],
        "author": [
            {
                "embeddable": true,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/users\/5"
            }
        ],
        "replies": [
            {
                "embeddable": true,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/comments?post=62946"
            }
        ],
        "version-history": [
            {
                "count": 0,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/posts\/62946\/revisions"
            }
        ],
        "wp:featuredmedia": [
            {
                "embeddable": true,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/media\/62949"
            }
        ],
        "wp:attachment": [
            {
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/media?parent=62946"
            }
        ],
        "wp:term": [
            {
                "taxonomy": "category",
                "embeddable": true,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/categories?post=62946"
            },
            {
                "taxonomy": "post_tag",
                "embeddable": true,
                "href": "https:\/\/hbbgroup.net\/en_us\/wp-json\/wp\/v2\/tags?post=62946"
            }
        ],
        "curies": [
            {
                "name": "wp",
                "href": "https:\/\/api.w.org\/{rel}",
                "templated": true
            }
        ]
    }
}