b14g: about 97M CORE drained from its Core staking contracts; contracts paused

Teaser from the source

On Oct 31 2026 at 09:29 UTC about 97M CORE staked through b14g, a Bitcoin dual-staking and yield protocol on the Core chain, was withdrawn without authorization and sent to attacker-controlled addresses, b14g said. It paused the affected contracts, says about 68M CORE remains on Core and exchange partners have frozen about 9M CORE linked to the attacker, and says BTC staked through b14g stays time-locked on Bitcoin and was not affected. Bitquery's on-chain analysis found one fresh wallet sent withdrawal requests for 0 CORE against 91 b14g staking orders it had never funded; Core's staking code treats 0 as the whole stake, so every order paid out in full (97.05M CORE, about $1.47M at the time). The pause came 66 minutes after the drain. Core DAO says the Core network itself was not compromised and CORE staked directly with validators or through other protocols is unaffected. b14g promises a post-mortem and next steps for affected users. Users have nothing to patch: don't restake through b14g until it publishes the post-mortem, and ignore unofficial refund offers.

This is the RSS-feed teaser. Read the full article at the original source.