Zero-token withdrawals let a hacker drain 97 million CORE from Bitcoin staking platform b14g

Bitcoin staking platform b14g lost approximately 97 million CORE tokens in a $1.47 million exploit on Oct. 31. Blockchain analytics firm Bitquery investigated the incident and found that the attacker drained 91 staking positions in a single transaction. The attacker submitted withdrawal requests for zero CORE, and b14g confirmed that the withdrawals were unauthorized. Bitquery’s review tied the loss to the zero-CORE withdrawal requests used against the platform’s staking positions.