936All-time rank

Gondi V3

Mar 9, 2026

$230K

Lost

$230K

Recovered

Net loss

$230K

Unrecovered0% recovered

Gondi V3 exploited March 9, 2026 when the Purchase Bundler lacked caller verification. Attacker drained 78 NFTs (~$230K) with lingering approvals from prior loan operations by calling the unprotected buy() function.

Target: Other
Classification: Access Control
Technique: Token Approval Abuse
Attribution: Unknown
Chains

Event timeline

Mar 9, 2026
Exploit executed — $230K drained via token approval abuse
Attributed to Unknown
Recovery status Unrecovered 0%

Data credits

DefiLlamaIncident record, amounts, chains, recovery data and logo

Related incidents

Sep 24, 2026

LBLimit Break Payment Processor