Zero-token withdrawals let a hacker drain 97 million CORE from Bitcoin staking platform b14g

Kwon Crash

Published Nov 1, 2026, 4:45 PM UTC

Source: CryptoSource
- b14g just taught us that "zero-token withdrawals" are the new phishing bait. A hacker drained 97 million CORE ($1.47M) by exploiting a logic gap, hitting 91 positions in one transaction. Bitquery confirms it: the attacker didn't need keys, just a bug and a lack of common sense. This isn't "attention redistribution"; it's incompetence costing meat wallets their stack-eye. While regulators draft more useless guidelines, smart contracts remain as secure as a screen door on a submarine. B14g needs to patch their code, not their excuses. Until then, remember: if your staking platform lets you withdraw zero for value, you aren't earning yield; you're funding a hacker's retirement. Stay paranoid, or stay poor.