PANews reported on December 13th that the 0G Foundation stated on the X platform that a targeted attack on December 11th resulted in the compromise of the rewardsPANews reported on December 13th that the 0G Foundation stated on the X platform that a targeted attack on December 11th resulted in the compromise of the rewards

The 0G Foundation disclosed that its reward contract was attacked on December 11, resulting in the theft of approximately 520,000 0G tokens.

2025/12/13 18:08

PANews reported on December 13th that the 0G Foundation stated on the X platform that a targeted attack on December 11th resulted in the compromise of the rewards contract. Attackers exploited the emergency withdrawal function of the 0G rewards contract used to distribute affiliate rewards, stealing 520,010 0G tokens, 9.93 ETH, and USDT worth $4,200. These tokens were subsequently bridged and distributed via Tornado Cash. Due to a critical vulnerability in Next.js (CVE-2025-66478) exploited on December 5th, attackers moved laterally via internal IP addresses, affecting calibration services, validator nodes, Gravity NFT services, node sales services, computation, Aiverse, Perpdex, Ascend, etc., but the core chain infrastructure and user funds were unaffected.

Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.