Yuga Labs recovered 68 high-value non-fungible tokens on June 8, 2026, following an exploit targeting Flooring Protocol, an Ethereum-based NFT liquidity platform. The recovered assets included 29 Bored Ape Yacht Club NFTs and two CryptoPunks, with a combined value exceeding $500,000. Attackers exploited a vulnerability in Flooring Protocol's accounting system that allowed generation of nearly unlimited fractional tokens with minimal capital deposits, enabling redemption of NFTs worth significantly more than original deposits. The exploit occurred while Flooring Protocol was undergoing a gradual shutdown of consumer-facing services announced in September 2025, with liquidity constraints and organizational difficulties leaving portions of the protocol insufficiently maintained. The NFT market maintained substantial value in early June 2026, with total market capitalization near $1.4 billion, while CryptoPunks held an estimated market cap of approximately 339,400 ETH (roughly $560 million) and BAYC maintained a valuation of about 90,590 ETH (around $150 million).
Flooring Protocol Exploit Targets NFT Liquidity Platform on June 8, 2026
The security incident unfolded on June 8, 2026, when attackers took advantage of a vulnerability within Flooring Protocol's accounting system. The platform enables users to deposit NFTs into pooled smart contracts and receive fractionalized tokens representing ownership interests in the pool. A flaw in the accounting mechanism reportedly allowed malicious actors to generate an almost unlimited number of fractional tokens while committing only minimal capital. By exploiting this weakness, attackers were able to redeem NFTs worth significantly more than the value of their original deposits. Several prominent collections, including Bored Ape Yacht Club and CryptoPunks, became exposed to substantial risk as a result.
Yuga Labs Recovers 68 NFTs Including 29 BAYC and 2 CryptoPunks
In response to the exploit, Yuga Labs, the company behind both BAYC and CryptoPunks, moved rapidly to safeguard affected assets. The recovery operation successfully secured 68 compromised NFTs, preventing additional losses from the vulnerability that enabled attackers to manipulate token balances and extract valuable digital collectibles. Company CEO Michael Figge indicated through social media updates that the recovered NFTs had been placed in secure custody and would remain protected until an appropriate remediation plan is implemented. The company's vice president of blockchain, known by the pseudonym 0xQuit, reportedly highlighted the significance of the recovery effort, noting the considerable value and importance of the assets involved.
Flooring Protocol Wind-Down Announced September 2025
The exploit emerged while Flooring Protocol was already undergoing a gradual shutdown of its consumer-facing services. In September 2025, the platform had announced plans to discontinue its NFT-focused offerings and encouraged users to redeem tokens and close fractionalized positions before October 15, 2025. Despite these measures, reports suggested that liquidity constraints and organizational difficulties left portions of the protocol insufficiently maintained. Former Flooring Protocol CEO FreeLunchCapital disclosed that personal NFT holdings had remained on the platform to help support liquidity throughout the wind-down process. Those assets reportedly became one of the primary targets during the attack.
NFT Market Capitalization Reaches $1.4 Billion in Early June 2026
Although NFT valuations remain well below the highs reached during the 2021 market boom, the sector continues to command substantial value. Industry data indicates that the total NFT market capitalization stood near $1.4 billion in early June 2026. CryptoPunks and BAYC continue to rank among the most valuable collections in the market. CryptoPunks maintained an estimated market capitalization of approximately 339,400 ETH, equivalent to roughly $560 million, while BAYC held a valuation of about 90,590 ETH, or around $150 million. Floor prices also remained relatively strong. CryptoPunks traded at approximately 32.7 ETH, while BAYC NFTs maintained floor prices near 9.16 ETH despite broader market weakness.
Exploit Exposes Risks in NFT Liquidity Platforms
The incident exposed the risks associated with NFT liquidity platforms, where users surrender direct custody of assets and depend entirely on smart contract security. The exploit is likely to reinforce industry calls for stronger code audits, improved accounting safeguards, and comprehensive contingency planning across decentralized finance and NFT ecosystems. While Yuga Labs' intervention helped contain immediate damage, Flooring Protocol has not yet provided a timeline for resolving the vulnerability. Consequently, uncertainty remains regarding the platform's future and the broader approach to managing risk within NFT-backed financial products.
Frequently Asked Questions
What did Yuga Labs recover on June 8, 2026?
Yuga Labs recovered 68 high-value NFTs on June 8, 2026, following an exploit targeting Flooring Protocol. The recovered assets included 29 Bored Ape Yacht Club NFTs and two CryptoPunks, with a combined value exceeding $500,000. CEO Michael Figge indicated through social media updates that the recovered NFTs had been placed in secure custody.
How did attackers exploit Flooring Protocol?
Attackers exploited a vulnerability in Flooring Protocol's accounting system on June 8, 2026. The flaw reportedly allowed malicious actors to generate an almost unlimited number of fractional tokens while committing only minimal capital. By exploiting this weakness, attackers were able to redeem NFTs worth significantly more than the value of their original deposits.
What is the current NFT market capitalization?
Industry data indicates that the total NFT market capitalization stood near $1.4 billion in early June 2026. CryptoPunks maintained an estimated market capitalization of approximately 339,400 ETH, equivalent to roughly $560 million, while BAYC held a valuation of about 90,590 ETH, or around $150 million.
