Cc9f267dcClaimThe attacker behind the October 31, 2026 b14g exploit exploited b14g by submitting 99 zero-value withdrawal requests against unfunded staking positions, which Core's staking contract interpreted as instructions to withdraw entire balancesAgreeDisagree
Cc9f267dcClaimb14g paused its affected smart contracts at 10:35 UTC on October 31, 2026, approximately 66 minutes after the initial unauthorized withdrawals in the b14g exploit occurredAgreeDisagree
Cc9f267dcClaimb14g confirmed that the October 31, 2026 b14g exploit was limited to CORE deposits and that Bitcoin staked through the protocol remained secure on the Bitcoin blockchainAgreeDisagree
Cc9f267dcClaimBitquery reported that the contract logic exploited in the October 31, 2026 b14g breach had been in place for approximately 17 months and required no compromised administrator keyAgreeDisagree
Cc9f267dcClaimBlockchain analytics firm Bitquery reported that the $1.47 million b14g exploit occurred at 09:29 UTC on October 31, 2026, draining 91 staking positions in a single transactionAgreeDisagree
Cc9f267dcClaimFollowing the October 31, 2026 b14g exploit, the b14g exploit attacker transferred 23 million stolen CORE tokens across newly created wallet addresses before b14g paused affected contractsAgreeDisagree
Cc9f267dcClaimb14g confirmed that CORE tokens staked directly with validators or through non-b14g protocols were not affected by the October 31, 2026 b14g exploitAgreeDisagree
Cc9f267dcClaimIsrael's Supreme Court rejected Alexander Block's appeal, ruling that exploiting a software flaw constitutes unlawful computer intrusion even when automated smart contracts technically permit the transactionAgreeDisagree
Cc9f267dcClaimGoogle's Threat Intelligence Group reported in April 2025 that North Korean IT workers embedded themselves in European crypto projects, including Solana smart contract developmentAgreeDisagree
Cc9f267dcClaimHyperliquid's HIP-3* upgrade adds optional onchain allowlists managed by deployers to restrict market access, and is available on testnet as of October 26, 2026AgreeDisagree
Cc9f267dcClaimThe OpenZeppelin Contracts library underpins over $38 trillion in transferred digital asset value, including major stablecoins and tokenized fundsAgreeDisagree
Cc9f267dcClaimFounded in 2015, OpenZeppelin has conducted over 900 security engagements and uncovered more than 10,000 code vulnerabilities before productionAgreeDisagree
Cc9f267dcClaimS&P Global acquired OpenZeppelin to expand its capabilities in assessing technology layer risks for on-chain financial products and to develop new security benchmarksAgreeDisagree
Cc9f267dcClaimSolana Company operates staking and validator infrastructure, provides blockchain advisory services to financial institutions, and holds Solana tokens in its corporate treasury strategyAgreeDisagree
Cc9f267dcClaimOn-chain Solidity verifiers for Groth16 and Plonk checks and applications whose proof aggregation ended in Groth16 or Plonk proofs were unaffected by SP1's high-severity soundness bugAgreeDisagree
Cc9f267dcClaimSP1 stores multidimensional data in Tensors, where SP1's native Rust verifier failed to check whether the number of stored elements matched the product of the tensor's declared dimensionsAgreeDisagree
Cc9f267dcClaimSecurity researcher Spreek identified four unexecuted malicious upgrade contracts deployed against Swell DAO's protocol that could have stolen approximately 2,500 ETHAgreeDisagree
Cc9f267dcClaimSwaps using Uniswap v4's Aggregator Hooks feature block-refreshed price quotes, atomic single-transaction settlement, and preserve existing token approvalsAgreeDisagree
Cc9f267dcClaimUniswap routing guidance updated on October 16, 2026, states that Uniswap's router requires manual allowlisting for hooks using specific permissions, leaving security guarantees outside the guidance's scopeAgreeDisagree
Cc9f267dcClaimPaper Trade participants earned platform fee distributions by holding Paper tokensAgreeDisagree