Kasplex KRC-20 Indexer Signature Bypass Drains Two Token Pools

This weekend, an attacker pulled 186.4 million ZEAL and 54.4 billion NACHO from a Kaspa KRC-20 bridge wallet without possessing its private key, then recycled the tokens through layer two (L2) networks and sold them into liquidity pools. The strange part is that Kaspa itself wasn’t hacked. Five valid transactions fooled an off-chain indexer into […]