Derived from ChainCatcher, 0G Foundation reported on X that a targeted attack exploited its reward contract, allowing hackers to steal 520,010 $0G tokens. Attackers used a compromised private key from an Alibaba Cloud instance, which was breached due to a critical Next.js vulnerability (CVE-2025-66478). The stolen tokens were bridged and dispersed via Tornado Cash. Total confirmed losses include 520,010 $0G, 9.93 ETH, and 4,200 USDT. Core chain infrastructure and user funds were unaffected.
0G Foundation Reward Contract Hacked, 520,010 $0G Stolen
KuCoinFlashShare
Summary
0G Foundation reported a reward contract exploit on X, with hackers stealing 520,010 $0G tokens. The breach stemmed from a compromised Alibaba Cloud key linked to a Next.js flaw (CVE-2025-66478). Stolen assets were moved via Tornado Cash. Losses include 520,010 $0G, 9.93 ETH, and 4,200 USDT. Core funds remain untouched. With the fear and greed index signaling heightened volatility, altcoins to watch may face renewed pressure amid the incident.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.