A critical vulnerability in Kasplex's KRC-20 off-chain indexer allowed an attacker to create unauthorized token balances and drain liquidity pools, affecting tokens like ZEAL and NACHO. Igra Labs reported the loss of bridge custody holdings, prompting ZealousSwap to warn users and several bridging services to pause operations. The exploit impacts only the indexer infrastructure, not Kaspa's Layer 1 consensus.