Bitcoin Dual Staking Protocol b14g: Approximately 97 million CORE were transferred out without authorization
The Bitcoin dual-staking protocol b14g released a security update stating that on October 31 at 09:29 UTC, approximately 97 million CORE staked through b14g were unauthorizedly withdrawn and transferred to an address controlled by the attacker. The project team has suspended the affected contracts upon discovery.b14g stated that they are currently investigating the incident with the Core team, security partners, and exchanges, tracking the funds, and coordinating to freeze and recover them. According to existing tracking, approximately 68 million CORE remain on the Core network, and exchange partners have frozen about 9 million CORE related to the attacker. The affected assets are the CORE staked through b14g; the BTC staked through b14g is still in a time-locked state on the Bitcoin network and is unaffected.The project team stated that the current priority is to protect users and recover the affected funds, and they will release a detailed post-mortem analysis covering the technical reasons, scope of impact, and follow-up arrangements for affected users. The two disclosed attacker addresses are 0xc556ed208285406d71705927f92d4f4eaea579f1 and 0x27758c30f8e424fbd8ca605bf31e9496c26ce92c. b14g is positioned as a BTCFi coordination layer, providing dual-staking matching for Core and Babylon.
