Kasplex KRC-20 Indexer Signature Bypass Drains Two Token Pools
- —186.4M ZEAL and 54.4B NACHO drained from a Kaspa KRC-20 bridge wallet
- —No private key used — Kasplex off-chain indexer signature bypass exploited
- —Five valid transactions fooled the indexer; tokens sold into liquidity pools
- —Kaspa network itself was not hacked; flaw lies in the KRC-20 indexer
Why it matters: The exploit highlights risks in off-chain indexers and bridges for Kaspa tokens, potentially undermining confidence in the KRC-20 ecosystem.
Source: Bitcoin.com