b14g Zero-Withdrawal Staking Exploit
An attacker drained about 97 million CORE from the b14g restaking protocol by submitting zero-token withdrawal requests that Core's staking contract read as an instruction to release entire positions.
Loss
1.5M
USD