b14g: Zero-amount CORE withdrawals drained 91 staking positions
How can a request to withdraw zero tokens leave behind losses of $1.47 million?
Withdrawal requests for zero CORE are linked to the attack that cost Bitcoin staking platform b14g about 97 million CORE, worth $1.47 million, on October 31, 2026. According to research by blockchain analytics firm Bitquery, cited by CryptoSlate, the attacker drained 91 staking positions in a single transaction. b14g confirmed the unauthorized withdrawals.
What happened on the b14g platform?
b14g, which CryptoSlate describes as a Bitcoin staking platform, suffered an exploit that allowed CORE to be removed. Staking involves locking up cryptocurrency in a participation mechanism; here, the staking positions were the ones the tokens were taken from.
The size of the loss is captured by two different figures: about 97 million CORE as a quantity and $1.47 million as the reported value. Although the service is linked to Bitcoin staking, the asset named as stolen in the coverage is CORE, not Bitcoin.
How were the zero-amount withdrawals used?
The attacker submitted withdrawal requests for zero CORE and managed to drain 91 positions in one transaction, according to Bitquery. That is what makes this incident unusual: the amount requested did not match the outcome that followed.
Think of an instruction that says “don’t withdraw anything” but ends up moving assets out anyway. The analogy describes the contradiction, not the technical cause. The available information does not show exactly which check failed or which function allowed this behavior.
Also, the reference to a single transaction does not mean only one position was affected. The research records 91 staking positions in the same incident, without specifying how many different users were behind them.
What has been confirmed and what remains unknown?
b14g’s confirmation covers the unauthorized withdrawals, while the description of the zero-amount requests is attributed to Bitquery’s research. The CryptoSlate report is dated November 1, 2026.
The available excerpt does not include a full technical assessment, information on recovering the funds or a specific compensation plan. Nor is there enough material for us to describe any remediation measures. Either way, we think it is essential to keep the confirmed facts separate from what we still don’t know.
What does it mean for users of staking services?
The b14g case draws attention to the risk posed by the platform itself, beyond the value of the tokens being staked. For readers in Greece, as for any user of such services, the question is a concrete one: what can happen to staked funds when a withdrawal function behaves differently than expected?
Our view is that this is the heart of the story. A zero-amount request turned out not to be harmless. From here on, we will be watching for a technical explanation that links these requests, step by step, to the loss of the CORE.