Staking Platform b14g Loses 97 Million CORE in Cyberattack

The staking platform b14g reported a loss of 97 million CORE tokens following an attack on October 31. The total financial damage reached 1.47 million dollars. The flaw enabled the draining of 91 staking positions through a single transaction.

The attacker used zero-value withdrawal requests to extract the assets. The Core network staking contract interprets null withdrawal requests as an order to release the entire balance held. The b14g system processed these improper requests without performing the necessary ownership validation.

Investigations show that the vulnerability had been present in the contract logic for about 17 months. The attacker sent 99 requests against positions they did not fund. The system accepted the commands and passed the instructions to the Core staking protocol.

The team behind b14g suspended the affected contracts after the incident. They are working with security partners and exchanges to attempt to recover the stolen funds. The company clarified that Bitcoin assets remain locked on the original network and were not compromised by the attack.

This incident highlights the operational risks in smart contracts that interact with decentralized staking protocols. Flaws in execution logic can increase the volatility of specific assets and heighten risk perception regarding decentralized finance platforms.