At 09:29 UTC on Oct 31, about 97M CORE staked through b14g was withdrawn without authorization to attacker addresses, b14g said in its security update.

At 09:29 UTC on Oct 31, about 97M CORE staked through b14g was withdrawn without authorization to attacker addresses, b14g said in its security update.

b14g said it immediately paused affected contracts and is working with the Core team, security partners and exchanges to trace and freeze funds. About 68M CORE remains on Core chain and exchange partners froze about 9M CORE linked to the attacker.

Only CORE staked through b14g was affected. BTC staked through b14g remains time locked on Bitcoin and was not affected.

Attacker addresses named by b14g are 0xc556…579f1 and 0x2775…e92c. On chain, 0xc556…579f1 sent about 73.6M CORE to 0x2775…e92c in one Core transfer.

Telegram channels put the loss at about $1.4M and repeat the 9M frozen figure, implying roughly $0.014 per CORE, close to current CEX quotes around $0.0133 on OKX, MEXC and Gate (quotes).

No post mortem with technical cause was published yet. b14g said further verified updates will follow.