NFT lending protocol Gondi suffers a security vulnerability; the official team advises users to immediately revoke authorizations and suspend repayments.

Foresight News reports that the NFT lending protocol Gondi has released an update regarding a security vulnerability. Currently, it is known that this vulnerability only affects NFTs that are not involved in active loans, and is related to an authorization vulnerability in the affected contracts. All affected contracts are Purchase Bundlers, including the Ethereum mainnet contract starting with address 0xc104 and HypeEvm-related contracts. NFTs currently being used as collateral in active loans are not at risk.

Gondi advises users to take the following actions: Do not repay loans until the official confirmation of security; immediately revoke authorization for the affected contracts via revoke.cash; stop performing any new operations on the platform. If your loan is about to expire, do not interact directly with the platform, but submit a ticket via Discord to contact the team for assistance.