bridge exploit · X 热门 · 2026-09-20 22:38 UTC

# bridge exploit — X 热门讨论 (2026-09-20 22:38 UTC)

## @DailyKaspa (Kaspa Daily) · 09-20 19:55 · ♥22 ↻2 💬3 KRC-20 EXPLOIT HITS KASPA L2 ECOSYSTEM

A critical vulnerability in the Kasplex KRC-20 off-chain indexer has reportedly allowed an attacker to create unauthorized token balances, bridge them to Layer 2, and drain liquidity pools. ZEAL and NACHO are among the affected tokens, with Igra Labs reporting that the bridge custody's entire holdings of both tokens were taken. ZealousSwap has warned users against buying or interacting with KRC-20 tokens until the issue is resolved, while several bridging services have been paused.

⚠️ The reported exploit affects KRC-20's off-chain indexing infrastructure, NOT Kaspa's underlying Layer 1 consensus or the newer covenant-based KCC-20 standard. The full extent of the losses remains under investigation. https://x.com/DailyKaspa/status/2101762165434728888