Overview
- Yuga Labs said it executed a whitehat recovery on June 8, 2026 to remove 68 at-risk NFTs from Flooring Protocol pools and now holds the tokens in company custody.
- The recovered items include 29 Bored Apes, 4 Mutant Apes, 2 CryptoPunks and other blue-chip pieces with Yuga estimating their value at roughly $500,000–$570,000.
- Yuga’s on-chain lead 0xQuit and security researcher Coffee led the extraction with funds and inventory fronted by the GrailsOTC desk to move assets before further theft.
- Flooring Protocol’s contracts allowed users to mint fungible μTokens 1:1 for locked NFTs and a packed storage bug produced ‘ghost ownership’ so a dust WETH deposit could mint near-infinite tokens that drained pools via an unchecked balance underflow.
- Flooring Protocol’s lead developer accepted responsibility for gas-saving bit-level code that escaped audits, developers warn deposits should stop, and teams are tracing remaining stolen NFTs and coordinating a patch and return process.