
a kaspa token is leaving an exploited indexer for a covenant that L1 consensus checks itself. @NachotheKat opened its move to KCC-20 on mainnet oct 30. one way, 1:1, from KRC-20, Igra L2 or Kasplex L2. the window closes jan 31, 2027. why: on sep 20 an attacker used a flaw in the Kasplex KRC-20 indexer to create extra tokens. the team says the flaw was in the indexer, not in kaspa. not kaspa, the indexer. i use the same defense in my reviews.
