PANews reported on March 10th that, according to The Block, the NFT platform Gondi recently suffered a contract vulnerability attack, resulting in the theft of approximately 78 NFTs and a loss of about $230,000. According to Gondi's official announcement, the attack was related to a new version of the Sell & Repay contract deployed on February 20th. Its Purchase Bundler function had a logical flaw that failed to properly verify whether the caller was the legitimate owner or borrower of the NFT. The stolen NFTs included 44 Art Blocks, 10 Doodles, and 2 Beeple artworks.

Gondi stated that the situation is under control. The Sell & Repay function remains disabled during the repair period, while other buying, selling, quoting, and trading functions are operating normally, and platform activity can be safely restored. The team is making every effort to compensate affected users, has contacted users who interacted with the platform, recovered some NFTs purchased by unsuspecting buyers and returned them to their original owners, and is using protocol fees to purchase comparable works from the series to offset losses. They are also actively negotiating with the parties involved in the loss of irreplaceable 1/1 NFTs.