Odaily reports: b14g has released a post-mortem report on the security incident of October 31, 2026. It states that the attacker exploited a compatibility flaw between its staking contract and the Core network's native staking contract, initiating 99 zero-amount (0 CORE) withdrawal requests across 91 staking orders in a single transaction, resulting in the theft of approximately 97.05 million CORE. The attack did not involve any private key leak, nor did the attacker modify or deploy any new b14g contract code. BTC staked through b14g was unaffected and remains locked on the Bitcoin chain.
Regarding fund recovery, approximately 68.15 million CORE (about 70.2% of the total stolen) was recovered on November 2 through a Core hard fork, and another approximately 12 million CORE has reportedly been frozen by trading platforms. As for user compensation, b14g plans to return the recovered CORE within the next 5 to 7 days in proportion to the original balances of each affected order, with the remaining losses to be repaid through 50% of future Core staking business revenue, claimable by affected users on a weekly basis.
