Zero-token withdrawals let a hacker drain 97 million CORE from Bitcoin staking platform b14g

Share

Bitcoin staking platform b14g suffered an attack on October 31 that drained approximately 97 million CORE tokens, valued at $1.47 million by Bitquery. The hacker submitted 99 zero-value withdrawal requests, which b14g’s contract accepted and passed to Core’s staking contracts, releasing 91 positions in a single transaction. The underlying flaw reportedly existed for approximately 17 months, and the affected contracts were not paused until 66 minutes after the attack. About 68 million CORE remained unmoved in three wallets that evening, while exchange partners froze approximately 9 million tokens; Bitcoin staked through the protocol was not affected.

Source: Read the original article

Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
Telemac
Telemachttp://cryptoinfo.ch
Passionné de nouvelles technologies, j’explore l’univers de la blockchain et des cryptomonnaies pour partager l’actualité et les innovations du secteur.

Read More

Items