Yuga Labs has successfully recovered dozens of high-value non-fungible tokens (NFTs) following a major exploit that targeted Flooring Protocol, an Ethereum-based NFT liquidity platform. The operation resulted in the retrieval of 68 NFTs, including 29 Bored Ape Yacht Club (BAYC) assets and two CryptoPunks, with a combined value exceeding $500,000.
Exploit Targets NFT Liquidity Platform
The security incident unfolded on June 8, 2026, when attackers took advantage of a vulnerability within Flooring Protocol’s accounting system. The platform enables users to deposit NFTs into pooled smart contracts and receive fractionalized tokens representing ownership interests in the pool. However, a flaw in the accounting mechanism reportedly allowed malicious actors to generate an almost unlimited number of fractional tokens while committing only minimal capital.
By exploiting this weakness, attackers were able to redeem NFTs worth significantly more than the value of their original deposits. As a result, several prominent collections, including Bored Ape Yacht Club and CryptoPunks, became exposed to substantial risk.
Yuga Labs Acts Quickly to Secure Assets
In response to the exploit, Yuga Labs, the company behind both BAYC and CryptoPunks, moved rapidly to safeguard affected assets. Company CEO Michael Figge indicated through social media updates that the recovered NFTs had been placed in secure custody and would remain protected until an appropriate remediation plan is implemented.
The company’s vice president of blockchain, known by the pseudonym 0xQuit, reportedly highlighted the significance of the recovery effort, noting the considerable value and importance of the assets involved.
The recovery operation successfully secured 68 compromised NFTs, preventing additional losses from a vulnerability that enabled attackers to manipulate token balances and extract valuable digital collectibles.
Vulnerabilities Surface During Platform Wind-Down
The exploit emerged while Flooring Protocol was already undergoing a gradual shutdown of its consumer-facing services. In September 2025, the platform had announced plans to discontinue its NFT-focused offerings and encouraged users to redeem tokens and close fractionalized positions before October 15, 2025.
Despite these measures, reports suggested that liquidity constraints and organizational difficulties left portions of the protocol insufficiently maintained. Those conditions may have contributed to the persistence of vulnerabilities that attackers later exploited.
Former Flooring Protocol CEO FreeLunchCapital disclosed that personal NFT holdings had remained on the platform to help support liquidity throughout the wind-down process. Those assets reportedly became one of the primary targets during the attack.
NFT Market Maintains Significant Value
Although NFT valuations remain well below the highs reached during the 2021 market boom, the sector continues to command substantial value. Industry data indicates that the total NFT market capitalization stood near $1.4 billion in early June 2026.
CryptoPunks and BAYC continue to rank among the most valuable collections in the market. CryptoPunks maintained an estimated market capitalization of approximately 339,400 ETH, equivalent to roughly $560 million, while BAYC held a valuation of about 90,590 ETH, or around $150 million.
Floor prices also remained relatively strong. CryptoPunks traded at approximately 32.7 ETH, while BAYC NFTs maintained floor prices near 9.16 ETH despite broader market weakness.
Broader Lessons for NFT Financialization
The incident exposed the risks associated with NFT liquidity platforms, where users surrender direct custody of assets and depend entirely on smart contract security.
The exploit is likely to reinforce industry calls for stronger code audits, improved accounting safeguards, and comprehensive contingency planning across decentralized finance and NFT ecosystems.
While Yuga Labs’ intervention helped contain immediate damage, Flooring Protocol has not yet provided a timeline for resolving the vulnerability. Consequently, uncertainty remains regarding the platform’s future and the broader approach to managing risk within NFT-backed financial products.
