The Core network has carried out a hard fork that recovered 68,146,177 $CORE from three attacker-controlled addresses, following an exploit on October 31 that involved about 97.05 million tok
The Core network has carried out a hard fork that recovered 68,146,177 $CORE from three attacker-controlled addresses, following an exploit on October 31 that involved about 97.05 million tokens. The update was reported on November 2 by @b14g_network, the Bitcoin dual-staking protocol whose contracts were affected, and relates to the @Coredao_Org network.
The recovered amount equals about 70.2% of the 97,045,563 CORE affected, according to PANews. The tokens have not yet been returned to users.
The funds were moved through a one-time on-chain state adjustment to a designated recovery address. According to TokenPost, the hard fork did not roll back transactions, create new tokens or change the total supply of CORE. That distinguishes the move from a reversal of the transactions that preceded it.
The recovery covers only part of the affected tokens. The b14g team is pursuing the remaining assets and is coordinating with exchanges and law enforcement to recover frozen funds, and it plans to develop a distribution plan, TokenPost reported.
b14g said about 97 million CORE staked through its platform was withdrawn without authorization at 09:29 UTC on October 31 and sent to attacker-controlled addresses, according to The Crypto Times. At the time, b14g said roughly 68 million CORE remained on the Core network, while exchange partners had frozen about 9 million CORE linked to the attacker.
Blockchain analytics firm Bitquery found the attacker drained 91 staking positions in a single transaction by submitting withdrawal requests for zero CORE, CryptoSlate reported. It valued the loss at about $1.47 million. Bitcoin staked through the protocol stayed time-locked on the Bitcoin blockchain and was not affected.
Core DAO said the exploit did not compromise the Core network. Consensus, validators and staking contracts continued to operate normally, and CORE staked directly with validators or through other protocols was unaffected, according to TokenPost.
No official claims process is currently active. b14g is still verifying balances and preparing a distribution plan, and funds held or frozen by exchanges have not been returned, according to PANews. Users should be cautious of recovery scam websites and should never share private keys or seed phrases. Recovery is an important step, but the process is far from complete.
Sources
