# SquiggleStrategy exploit leads TokenWorks to an NFT-swap flaw in eight NFTStrategy contracts

In Brief:TokenWorks found a flaw in eight live NFTStrategy contracts. It allows an NFT owned by the protocol to be traded out for another token from the same contract. PunkStrategy is not affected.The flaw came to light when an attacker pulled Squiggles out of SquiggleStrategy and replaced them with

| Fact | Value |
| --- | --- |
| Published | 28 October 2026 |

Source: https://egamers.io/squigglestrategy-exploit-leads-tokenworks-to-an-nft-swap-flaw-in-eight-nftstrategy-contracts/