Input validation flaw stories

Oct 31, 2026

b14g Bitcoin staking protocol loses $1.47 million in exploit

Bitcoin staking platform b14g suffered a $1.47 million exploit on October 31, losing approximately 97 million CORE tokens through zero-token withdrawal vulnerability. The protocol paused contracts and says staked BTC was unaffected.

Oct 31, 20262 sources

Aug 28, 2026

Cosmos Labs discloses critical bug behind $5.7 million six-chain hack

Cosmos Labs revealed that attackers exploited a flaw in Cosmos EVM across six blockchain networks between August 20-25, stealing funds after the vulnerability was incorrectly cleared as fixed.

Aug 28, 20262 sources

Top claims

▪Exchange partners froze approximately 9 million stolen CORE tokens linked to the b14g exploit attacker following the October 31, 2026 exploit of b14g
▪The attacker behind the October 31, 2026 b14g exploit exploited b14g by submitting 99 zero-value withdrawal requests against unfunded staking positions, which Core's staking contract interpreted as instructions to withdraw entire balances
▪Blockchain analytics firm Bitquery reported that the $1.47 million b14g exploit occurred at 09:29 UTC on October 31, 2026, draining 91 staking positions in a single transaction

Subtopics

Crypto hacks2 Crypto security2 Smart contract vulnerabilities2 Bitcoin1 Blockchain interoperability1 Blockchain security & risks1 Crypto1 Cryptocurrencies1 DeFi1 DeFi exploits1 Ethereum Virtual Machine (EVM)1 Mining & Staking1 Multi-chain attack1 Smart contracts1

Related timelines