---
id: 5381
title: "NFT Pallets: Steal any listed NFT"
source_domain: hackenproof.com
source_url: "https://hackenproof.com/blog/ternoa-nft-auction-vulnerability"
published_at: "2026-06-11 10:09"
tags: ["web3", "smart-contract", "blockchain", "hackenproof", "nft", "bugfix-review", "ternoa"]
phying_url: "https://phying.com/item/5381"
lang: en
---

# NFT Pallets: Steal any listed NFT

## Summary

A bug fix review of Ternoa's NFT auction pallet: a commission fee left unrecorded at auction start let a market owner redirect the full sale price and claim the NFT; fixed, with no user losses.

## Intelligence Metadata

- **Sources:** hackenproof.com
- **Published:** 2026-06-11 10:09
- **Original:** https://hackenproof.com/blog/ternoa-nft-auction-vulnerability
- **Phying News:** https://phying.com/item/5381