Bitcoin Staking Protocol b14g Exploited: 97 Million CORE Stolen

The Bitcoin dual pledge protocol b14g has reported a significant security breach resulting in the unauthorized withdrawal of approximately 97 million CORE tokens. The incident, which occurred on October 31, 2026, at 17:29 UTC, targeted assets pledged through the platform's smart contracts. Following the discovery of the exploit, the b14g team immediately suspended all affected contract operations to prevent further loss of capital and initiated a recovery protocol in coordination with blockchain security experts.

Details of the Security Breach and Asset Tracking

According to the official security update, the attacker managed to gain control over the pledged assets and transferred them to an external wallet address. The Core DAO ecosystem and various security partners have been mobilized to track the movement of the stolen funds across the network. Current on-chain forensics indicate the following status of the assets:

• Approximately 68 million CORE tokens currently remain stationary on the Core blockchain.
• Centralized trading platforms and partner exchanges have successfully frozen roughly 9 million CORE associated with the attacker's known addresses.
• Efforts are ongoing to identify the remaining 20 million tokens that were part of the initial exploit.

The project team has clarified that the vulnerability was isolated to the b14g pledge agreement specifically, and other assets within the broader Core ecosystem or unrelated Bitcoin staking protocols remain unaffected by this particular incident.

Response Measures and Recovery Efforts

In response to the attack, b14g has established a multi-lateral task force involving the Core team and external cybersecurity firms. The primary objective is to maintain the freeze on the identified assets while pursuing the recovery of the remaining funds. The official statement from the developers emphasized their commitment to transparency during the investigation.

Upon discovery, the official immediately suspended the affected contract and is cooperating with the Core team, security partners, and exchanges to track the funds and coordinate freezing and recovery.

This incident highlights the persistent risks associated with decentralized finance (DeFi) protocols and the importance of rapid response mechanisms. As the investigation progresses, the b14g team is expected to provide a detailed post-mortem report outlining the specific technical vulnerability used by the attacker to execute the unauthorized withdrawals. Users are advised to monitor official channels for further updates regarding the status of their pledged CORE tokens.