On Sunday, Yuga Labs intervened in a vulnerability exploit targeting Floor Protocol, transferring approximately $570,000 worth of NFTs to prevent further theft of these assets. The action involved prominent collections including 29 Bored Apes and 2 CryptoPunks.
How do vulnerabilities spread?
Floor Protocol ceased operations last year, but its existing liquidity pools remain exposed to attack vectors. Attackers are alleged to have exploited a vulnerability to convert small amounts of wrapped Ethereum (wETH) into nearly unlimited μToken balances, then use these tokens to drain NFTs from the pools.
Yuga Labs stated that after discovering the vulnerability, the team determined that the affected pathway could potentially impact additional valuable collections, including their own Bored Ape assets. As a result, the company promptly moved the at-risk NFTs out of the vulnerable pool to prevent malicious actors from exploiting them.
Who is currently holding your assets?
Yuga Labs is still holding these NFTs and says it is in communication with the Floor Protocol developers to find a way to return the assets to their original owners. CEO Michael Figge also stated on X that this approach prevents further asset damage.
The NFT market has clearly cooled down.
This incident also occurred after the NFT market's popularity clearly declined. At the beginning of 2022, Bored Apes frequently sold for over $300,000, and Ethereum NFT daily trading volumes often exceeded $100 million.
In 2026, CryptoSlam recorded a maximum single-day sales volume of just $32.3 million. However, top-tier collections still command high prices. According to NFT Price Floor, the Bored Ape floor price remains above $15,000, and the lowest listing price for CryptoPunks is approximately $55,000.