[0G Foundation Contract Attacked, Resulting in Theft of 520,000 0G Tokens]
0G Foundation issued a statement indicating that on December 11, the reward contract was subjected to a targeted attack. The attacker exploited the emergency withdrawal function to steal 520,010 0G tokens, which were subsequently transferred via Tornado Cash. The attacker leveraged a Next.js vulnerability triggered on December 5 to infiltrate Alibaba Cloud instances and obtain leaked private keys. The confirmed total loss amounts to 520,010 0G tokens, 9.93 ETH, and 4,200 USDT. Apart from the reward distribution contract, the core chain infrastructure and user funds were not affected.