Kaspa KRC-20 Bridge Wallet Exploit Drains Millions
- An attacker extracted 186.4 million ZEAL and 54.4 billion NACHO from a Kaspa KRC-20 bridge wallet.
- The tokens were moved without the attacker having the private key.
- Tokens were recycled through layer two (L2) networks and sold into liquidity pools.
- Kaspa itself was not hacked during this incident.
- Five valid transactions tricked an off-chain indexer, facilitating the attack.
This weekend’s attack on a Kaspa KRC-20 bridge wallet led to the unauthorized transfer of substantial amounts of ZEAL and NACHO tokens through L2 networks, despite no breach in Kaspa’s core system security being detected.
