Developers affiliated with Yuga Labs rescued 68 non-fungible tokens from Flooring Protocol after an exploit put assets from collections including Bored Apes and CryptoPunks at risk, in an operation that recovered more than 500,000 USD worth of NFTs.
Yuga Labs CEO Michael Figge said Monday that the recovered NFTs are now in the company’s custody and will be returned to their owners once a solution is finalized. Yuga’s pseudonymous vice president of blockchain, known as 0xQuit, said the recovery covered more than half a million dollars in value.
What happened to Flooring Protocol
Flooring Protocol, a platform that allowed holders to fractionalize blue-chip NFTs into fungible tokens, had already been winding down parts of its consumer-facing business before the incident. In September 2025 the protocol announced that its Web3 consumer services were entering sunset mode and advised FPv2 token holders to redeem their NFTs and exit fractional positions before October 15, 2025.
Former CEO FreeLunchCapital said the protocol faced liquidity issues and organizational changes that left parts of the NFT division unmanaged. They said they had continued providing liquidity and kept some of their own NFT assets on the platform to help users exit positions, and that those assets became a primary target during the exploit.
FreeLunchCapital added that they are in talks with the parent group behind the management team to regain control of the protocol, leaving open the possibility of a coordinated remediation for remaining affected users.
The mechanics of the rescue
Details of exactly how the 68 NFTs were extracted remain partial, but the outcome illustrates an old pattern in crypto: when a protocol fails but the underlying assets are identifiable, white hats and affiliated teams can sometimes front-run attackers or negotiate recovery before everything is drained.
Yuga Labs’ involvement makes sense given the stakes. Bored Ape Yacht Club remains one of the two largest NFT collections by market capitalization, and Yuga has a commercial and reputational interest in preventing its flagship assets from ending up in exploiter wallets or being dumped on secondary markets.
The rescued NFTs are in Yuga custody pending a finalized return process, which means owners should expect a claims procedure rather than an instant airdrop back to their wallets.
Blue chips still carry real value
The incident is a reminder that even in a deeply cooled NFT market, top collections still hold substantial floor value. According to CoinGecko data cited around the incident, CryptoPunks had a floor price of roughly 32.7 ETH, around 54,600 USD, while Bored Ape Yacht Club NFTs sat near 9.16 ETH.
NFT Price Floor data showed CryptoPunks and Bored Ape Yacht Club remain the two largest NFT collections by market capitalization. CryptoPunks is valued at about 339,400 ETH, roughly 560 million USD, while BAYC stands at around 90,590 ETH, near 150 million USD.
Those numbers explain why Flooring was worth attacking. When a single CryptoPunk trades at more than 50,000 USD, a pool of fractionalized blue chips is a concentrated honeypot, and a protocol in sunset mode with a partially unmanaged division is exactly the kind of target opportunistic exploiters look for.
The wider NFT market context
Despite falling sharply from its peak, the NFT market still represents billions of dollars in value. CoinGecko data showed overall NFT market capitalization climbed to around 2 billion USD in late April and early May before falling back toward 1.4 billion USD by Monday.
That decline frames the environment in which the Flooring incident occurred. A shrinking market means less fee revenue for NFT infrastructure, which in turn leads to wind-downs, team departures, and maintenance gaps, precisely the conditions former leadership cited. The security failure and the market decline are not separate stories; they are the same story at two levels.
Lessons for NFT holders
The episode carries practical takeaways. First, fractionalization platforms add a layer of custody risk on top of the NFTs themselves: when the wrapper protocol fails, the underlying assets can be stranded or targeted even though the collections are sound. Second, sunset announcements deserve immediate action. Users who exited Flooring after the September 2025 warning but before the exploit avoided this weekend’s stress entirely. Third, custody concentration matters: assets held in a winding-down protocol are only as safe as the team still watching them.
For Yuga Labs, the rescue is a rare piece of good optics in a tough year for NFTs, a demonstration that at least one major issuer will still spend resources defending holders when things break. For the market, it is another entry in the long ledger of protocol failures that did not have to end this way, and a reminder that the words “winding down” in a protocol announcement should be read as “withdraw now.”
Market context at writing: ETH traded near 2,493 USD and BTC near 80,925 USD per the 17:00 UTC snapshot used across today’s coverage.
68 rescued and over half a mil recovered is great, but the number nobody printed is how many NFTs were still fractionalized when the exploit hit. hoping thats zero when details drop
exactly, 68 rescued sounds great until you ask the denominator. the fractionalized tokens still outstanding is the number that matters
0xquit and figge fronting a rescue for someone elses protocol is rare behavior in this space. most CEOs wouldve tweeted condolences and moved on
figge saying owners get their apes back once a solution is finalized is carrying a lot of weight. that phrase can mean weeks or quarters
0xquit and figge pulling 68 apes and punks out of a fractionalized protocol before the drainer got them is genuinely impressive work
wild that flooring was already in sunset mode since october and still had this much value stuck in it. exit deadlines matter ppl
the october 15 redemption deadline was posted in 2025 and apes still sat in there. exit windows only work if people read them
exactly, the october redemption window was open for months before the exploit. plenty of owners never touched their fractional tokens once
sunset mode since 2025 and still sitting on blue chips, the wind-down plan was clearly theoretical lol
68 NFTs worth over half a million and owners get them back once a distribution plan is sorted. White hats carrying the whole industry’s reputation right now.
custody is nice, a distribution date is nicer. once a solution is finalized can carry a lot of weeks inside it
once a solution is finalized is doing career amounts of work in that sentence. give the apes a date yuga