A KRC-20 indexer vulnerability in Kasplex allowed forged transactions to drain liquidity from the KAT Bridge vault without valid signatures, affecting bridged assets like ZEAL. Separately, CS2 scammers tricked users into deploying fake trading bots via YouTube tutorials, resulting in 224 drained inventories totaling $862,000.