Kasplex KRC-20 Indexer Signature Bypass Drains Two Token Pools
This weekend, an attacker pulled 186.4 million ZEAL and 54.4 billion NACHO from a Kaspa KRC-20 bridge wallet without possessing its private key, then recycled the tokens through layer two (L2) networks and sold them into liquidity pools. The strange part is that Kaspa itself wasn’t hacked. Five valid transactions fooled an off-chain indexer into […]
Key Takeaways
- This weekend, an attacker pulled 186.4 million ZEAL and 54.4 billion NACHO from a Kaspa KRC-20 bridge wallet without possessing its private key, then recycled the tokens through layer two (L2) networks and sold them into liquidity pools.
- The strange part is that Kaspa itself wasn’t hacked.
- Five valid transactions fooled an off-chain indexer into […]
Summary generated by IndiCrypto from News.Bitcoin.com. IndiCrypto is a news aggregator and does not provide investment advice. Read the original article for full context.
More in Security
X sues its own users for running a fake bitcoin news bot farm
X has sued Vivek Kumar Sen and Zmyang Sherpa for running fake bitcoin headline accounts to fraudulently earn creator rewards from the platform.
X sues Bitcoin account operators over alleged $278K payout fraud
X alleges six Bitcoin-focused accounts coordinated posts and engagement to inflate creator payouts, with claimed and projected losses of at least $378,000.
X sues UK duo over alleged $277K crypto account payout fraud
X alleges two UK users manipulated crypto-focused accounts to obtain $277,000 through its creator revenue-sharing program.