b14g Review of the CORE Theft Incident: No Private Key Leak Involved, Plans to Initiate Fund Repayment Within the Next 5 to 7 Days

b14g released a security incident review report on October 31, 2026, which pointed out that attackers exploited a compatibility flaw between its staking contract and the native staking contract of the Core network. Through a single transaction, they initiated 99 zero-amount (0 CORE) withdrawal requests to 91 staking orders, resulting in approximately 97.05 million CORE being stolen. This attack did not involve private key leakage, nor did the attackers modify or deploy new b14g contract code.

BTC staked through b14g was unaffected and remains locked on the Bitcoin chain. In terms of fund recovery, approximately 68.15 million CORE (about 70.2% of the total stolen amount) was recovered on November 2 through a hard fork of Core, and another approximately 12 million CORE has reportedly been frozen by trading platforms. Regarding user compensation, b14g plans to return the recovered CORE to affected orders in proportion to their original balances within the next 5 to 7 days, while the remaining losses will be repaid through 50% of future Core staking business income, with affected users able to receive payments weekly.