Core network exploited to accelerate 255M CORE rewards; upgrade burns 186M, recovery ongoing for 69M

A flaw in Core's protocol-internal reward-crediting path let block rewards be credited repeatedly under a specific account configuration, pulling forward roughly 255M CORE of future emissions without breaching the 2.1B maximum supply. The CoreRewardFix upgrade, activated 2026-09-03 at 13:00 UTC with no downtime, burned about 186M CORE via direct state reduction and capped validator balances at a fair-earnings floor. Around 69M CORE moved by attackers before the upgrade remains dispersed across external wallets; Core Foundation is pursuing recovery with law enforcement. No user or staker funds were affected, and Halborn reviewed the reward paths.

✨ AI summary of the linked source — not editorial content.

Explore the topic

• Burn