Incident report: October 5, 2026
On October 5th, 2026, an attacker exploited a flaw in the veBTC contract to move 37 veBTC positions out of 36 holders’ wallets, and bridge the proceeds off the Mezo chain. Approximately 5.52 BTC was taken. The vulnerability has been fixed, funds are at no further risk, and all