Bitcoin staking platform b14g reported a $1.47 million loss after a hacker exploited a zero-token withdrawal flaw on Oct. 31, draining 97 million CORE tokens from 91 staking positions in a single transaction. The breach was identified by blockchain analytics firm Bitquery, which traced the unauthorized withdrawals to a single address. b14g confirmed the incident and is investigating remediation steps.
What happened
According to Bitquery, the attacker submitted withdrawal requests that specified a zero amount of CORE, allowing the platform’s smart contract to process the request without moving any tokens. The contract then released the underlying staked CORE, resulting in the removal of 97 million CORE, valued at approximately $1.47 million at the time of the exploit. The operation affected 91 distinct staking positions, all of which were emptied in one blockchain transaction. b14g’s security team acknowledged the unauthorized withdrawals and said it had begun a forensic review of the smart‑contract code and the transaction logs.
Why it matters for traders
- Staking risk exposure: The incident highlights a specific vulnerability in staking contracts that can be exploited without moving the native token, underscoring the need for thorough code audits before allocating capital.
- Token price pressure: CORE’s market liquidity may face short‑term pressure as traders react to the loss of a large token supply, potentially affecting price stability.
- Broader DeFi security concerns: The technique used bypasses traditional token‑movement checks, suggesting that similar flaws could exist in other staking or yield‑farm contracts.
- Bitcoin market context: Bitcoin was trading at $77,888 with a modest 0.64% gain over 24 hours, indicating that broader market sentiment remains stable despite the b14g incident.
What to watch next
- Updates from b14g on any compensation or token recovery efforts for affected stakers.
- Further analysis from blockchain security firms on whether the zero‑token withdrawal method can be replicated on other platforms.
- Potential regulatory commentary on staking contract standards, especially if similar exploits emerge.
- CORE price movements in the days following the breach, which may signal market confidence in the token’s resilience.
Sources
- Zero-token withdrawals let a hacker drain 97 million CORE from Bitcoin staking platform b14g (cryptoslate.com)
This is a developing story and will be updated as new information is confirmed. For information only, not financial advice.
