Yuga Labs rescues 29 Bored Apes and two CryptoPunks in Nft exploit
Yuga Labs rescued about $570,000 worth of nft assets from an exploit tied to the defunct Floor Protocol on Sunday. The whitehat move pulled 29 Bored Apes and two CryptoPunks out of vulnerable pools before the same path could be used again.
Floor Protocol’s wrapped token flaw
Floor Protocol let users deposit NFTs into pools, receive fungible μTokens, and then trade those tokens on a decentralized exchange or burn them to reclaim the underlying NFT. The exploit let attackers turn a small amount of wrapped Ethereum into a nearly infinite μToken balance, which could then be used to drain the pools.
That matters for holders because the rescue did not just protect one collection. Yuga Labs said it found another related exploit path that could be used against additional vulnerable Flooring pools, including Bored Apes.
0xQuit moves first
0xQuit, the pseudonymous Yuga Labs vice president of blockchain, said the team moved to remove exposed NFTs from vulnerable Flooring pools before another malicious actor could extract them first. He wrote, “After digging deeper, we found another related exploit path that could be used against additional vulnerable Flooring pools,” and added, “The goal was to remove exposed NFTs from vulnerable Flooring pools before another malicious actor could exploit the same paths and extract them first.”
Michael Figge said, “Thanks to this move, we were able to save dozens of assets from impacting the market and Flooring protocol tokens from being compromised.” Yuga Labs is keeping control of the assets while it works with Floor Protocol developers to return the NFTs to their rightful owners.
Bored Apes and CryptoPunks
The haul included 29 Bored Apes and two CryptoPunks, both of which still trade at far higher levels than most NFTs. Bored Apes have a floor price of more than $15,000, while CryptoPunks trade for a minimum of around $55,000, even after the broader market cooled from early 2022.
That market backdrop is why the exploit mattered beyond Floor Protocol itself. Daily sales volumes for Ethereum NFTs routinely exceeded more than $100 million per day in early 2022, and the top sales volume day in 2026 stands at $32.3 million, so a drain hitting dozens of assets would have landed into a thinner market.
The immediate question is whether the rescue ends with the assets back in owner hands or with a longer repair process for the broken pool design. Yuga Labs has said it is working with Floor Protocol developers on a solution, and the handling of those NFTs will decide whether the save becomes a clean return or a drawn-out recovery.
