Kasplex KRC-20 indexer exploit reportedly drains Kaspa L2 liquidity pools; ZEAL and NACHO among affected tokens

A critical vulnerability in the Kasplex KRC-20 off-chain indexer reportedly let an attacker create unauthorized token balances, bridge them to Layer 2 and drain liquidity pools, with ZEAL and NACHO among affected tokens. The Kasplex indexer is offline while the issue is resolved, leaving KRC-20 tokens unavailable in wallets.

Detected & updated continuously · Source: Nebula