0G reward contract under attack — approximately 520,000 tokens including $4,200 worth have been stolen

MindsetExpander · 2026-01-21T11:25:23+00:00

On December 11, the 0G Foundation suffered a targeted attack that compromised a rewards contract, resulting in significant asset theft including 520,010 0G tokens, 9.93 ETH, and $4,200 USDT. The attack exploited a vulnerability in Next.js, allowing the attackers to access multiple services. Although several services were affected, the core blockchain infrastructure and user funds remained secure, underscoring the importance of security measures in blockchain development.

MindsetExpander

2026-01-21 11:25:23

Abstract generation in progress

According to the 0G Foundation, on December 11th, a targeted attack compromised the reward contract, resulting in the theft of a significant amount of assets. In this incident, the emergency withdrawal function of the 0G reward contract was exploited, leading to the outflow of 520,010 0G tokens, 9.93 ETH, and USDT worth $4,200. The stolen assets are believed to have been distributed to multiple destinations via the privacy mixer Tornado Cash.

Vulnerability Trigger — Technical Background Details

The attack was facilitated by a critical vulnerability in Next.js (CVE-2025-66478), discovered on December 5th. The attacker exploited this vulnerability to penetrate the 0G Foundation’s systems laterally through internal network addresses. This method likely allowed access to multiple services from a single entry point.

Affected Services and Scope of Damage

The attack impacted several services operated by the 0G Foundation. Specifically, calibration services, validator nodes, Gravity NFT services, node sales platforms, computing-related services, Aiverse, Perpdex, Ascend, and others were affected. However, the 0G Foundation emphasizes that the core blockchain infrastructure and user funds were not impacted.

Currently, 0G tokens are trading at approximately $0.75, and the 520,010 tokens that were stolen amount to roughly $390,007 at current market prices. This incident highlights the importance of security measures and vulnerability management in blockchain development teams.

0G1,03%

ETH2,24%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.