A Kaspa KRC 20 exploit involved fraudulent transfers of 186.4 million ZEAL and 54.4 billion NACHO tokens through a Kasplex indexer vulnerability. Approximately 1 million iKAS from the attacker may be frozen during an Igra exit process, potentially preventing their withdrawal to Kaspa L1.