NFT lending platform Gondi experienced a smart contract attack on Monday, with attackers stealing approximately $230,000 worth of NFT assets. Although this incident did not affect other system modules, the platform immediately suspended the relevant contracts and initiated a repair process, while other services continued to operate normally. Gondi stated that it has commissioned Blockaid and an independent audit team to complete a security review, confirming the overall safety and reliability of the protocol.
According to Blockaid's tracking, after the attack, the perpetrators attempted to sell some of the stolen NFTs. Currently, their wallet still retains some assets, while the rest have flowed into the hands of unsuspecting third-party buyers. The Gondi team has proactively contacted all relevant buyers, requesting assistance in returning the items. So far, the community has voluntarily returned at least four stolen NFTs, including Aluminum Gazer, Servant of the Muse, Doodle, and Lil Pudgy.
To compensate for user losses, Gondi has decided to use platform protocol fees to repurchase the recovered NFTs and directly compensate all affected owners. The platform emphasizes that while this compensation plan does not involve returning the original items, it aims to achieve a fair and meaningful resolution, and is currently communicating one-on-one with each affected user to confirm details.