White hats say they rescued about $500,000 in NFTs after an exploit against Flooring Protocol.
Cointelegraph reports that the incident involved a “flooring” mechanism. In other words, the attacker used the protocol’s design to obtain NFTs or take control of positions tied to NFT floor pricing, then moved them through the affected system. The rescue followed when outside responders identified the compromised assets and coordinated transfers back to legitimate wallets.
What Cointelegraph says was rescued
Cointelegraph frames the outcome as a recovery effort rather than a full accounting of who lost what. The report states that white hats returned roughly $500K in NFTs after the exploit, which suggests the attacker’s drain was at least partially interrupted.
That’s important for holders, but it also leaves a gap. A “rescue” does not automatically mean every impacted position was restored. It means responders got enough custody back to move specific assets, not that every contract interaction was unwound or that every user’s exposure is fully recovered.
Cointelegraph does not list the exact collections inside the rescued bundle in the provided text, so this story cannot responsibly claim which projects were hit beyond what the report later contextualizes.
Market context: NFT value has softened since April
Even with a recovery story, the broader NFT market does not look hot.
Cointelegraph cites CoinGecko and NFT Price Floor data showing NFT market cap has cooled since April. That matters because floor-linked products and “rescue” narratives tend to attract more attention when trading is active. When liquidity and market cap fade, exploit impact can linger longer, especially if bids thin out or if market participants price uncertainty into risk.
Cointelegraph also notes that CryptoPunks and BAYC still sit as top collections by value. In practice, that means two things.
First, the most valuable collections can still draw the biggest attention from both legitimate infrastructure and attackers. Second, if market cap cools, even major collections can see floor pressure, which can distort how users interpret “flooring” features.
Why the recovery still leaves questions
Security desk rule one is simple. Confirmed recoveries do not remove open questions.
The provided Cointelegraph excerpt does not include details like the affected contracts, how the exploit worked step by step, what was drained versus what was returned, or which mitigations the team deployed after the rescue.
For readers tracking this kind of incident, the critical unknowns are:
- Whether the attacker still has assets in limbo or if all transfers were reversed
- Whether the protocol has patched the vulnerability or only enabled a reactive rescue
- Whether similar “flooring” paths exist in other deployments
Until those answers land in public incident reporting, the safest interpretation is narrow. The rescue indicates responders regained control of about $500K worth of NFTs. It does not prove the exploit is fully contained across all positions.
What to watch next
For Flooring Protocol specifically, the next meaningful milestones are technical.
Cointelegraph’s framing points to an exploit and an attempted recovery. Readers should look for follow-ups that confirm:
- Contract changes and audit references tied to the exploit cause
- A transparent list of impacted wallets or at least a traceable asset recovery summary
- Any monitoring steps that prevent the same floor-linked logic from being re-used
For the market, Cointelegraph’s CoinGecko and NFT Price Floor context suggests a softer NFT environment since April. In that setup, recovery headlines can be followed by slow normalization, because liquidity often decides how quickly value returns to exposed assets.
| Signal from Cointelegraph (via data sources) | What it implies for NFT risk |
|---|---|
| NFT market cap cooled since April | Floors and liquidity may be less supportive, increasing uncertainty after security events |
| CryptoPunks and BAYC remain top collections by value | High-value collections can remain primary targets and primary references for “flooring” products |
| White hats rescued about $500K in NFTs after Flooring Protocol exploit | Some theft was halted or partially reversed, but full impact and completeness remain unconfirmed in the excerpt |
The desk takeaway is controlled optimism. A recovery of roughly $500K is real enough to matter. The rest still needs the forensic paperwork.