Hacker Drains $1.47M from b14g Bitcoin Staking Platform

bitquery.io

Hacker Drains $1.47M from b14g Bitcoin Staking Platform

First seen 1 Nov 2026, 18:54 UTC • •54.6

Article Content

1 / 4

Browse articles

ThreatCluster •November 1, 2026 at 20:17 UTC

•b14g lost approximately 97 million CORE tokens due to a contract logic flaw.
•The attacker exploited zero-value withdrawal requests, draining funds from 91 staking positions.
•b14g paused affected contracts and is coordinating recovery efforts with exchanges.

On October 31, 2026, the b14g Bitcoin staking platform was exploited, resulting in the loss of approximately 97 million CORE tokens, valued at $1.47 million. The attacker executed 99 zero-value withdrawal requests, which were incorrectly processed by the platform's contract logic, allowing the full balance of 91 staking positions to be drained in a single transaction. The exploit was confirmed by blockchain analytics firm Bitquery, which noted that the vulnerability had existed for 17 months. Following the attack, b14g paused the affected contracts and is working with security partners to recover the funds. As of October 31, 68 million CORE tokens remained in the attacker's wallets, while b14g's exchange partners froze 9 million CORE. The breach did not affect Bitcoin deposits, which remain secure on the BTC blockchain.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-10-31

Attack executed

An attacker drained 97 million CORE from b14g by exploiting a flaw in the withdrawal mechanism.

2026-10-31

b14g pauses contracts

b14g paused affected contracts approximately 66 minutes after the attack to prevent further losses.

2026-10-31

Funds frozen

Exchange partners of b14g froze 9 million CORE in response to the exploit.

More articles in this cluster (3)

Threat Graph

4 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Zero-day Exploit

Affected Platform (2)

Bitcoin
Core

Tool (1)

Bitquery

Relationships

Zero-day Exploit targets Bitcoin
Zero-day Exploit targets Core

Common questions

How much was stolen?

Approximately 97 million CORE tokens were stolen, valued at $1.47 million.

What caused the exploit?

The exploit was due to a flaw in the withdrawal mechanism that interpreted zero-value requests as full withdrawals.

What is b14g doing to recover the funds?

b14g is coordinating with security partners and exchanges to recover the stolen tokens.

Continue Reading

China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…

Chinese Actor Compromises US Government Networks via PHP2Shell Exploit A suspected Chinese nation-state actor exploited vulnerabilities in Palo Alto Networks firewalls using a chained PHP2Shell exploit and a Linux kernel privilege escalation flaw. The attack, which began on October 23, targeted 25 servers across the US, Japan, Taiwan, and South Korea, with a focus on US…