Hacks & Security Unverified First seen 2026-10-10 03:02 UTC

CertiK report traces failure chain in Intents and HOT incident

CertiK Alert describes an unusual failure chain in which Intents credited an attacker, an oversized refund log failed the resolver, and HOT returned the backing while the credit survived. CertiK says its report traces the preparation, receipts and cash-outs with source-code citations.

Why “Unverified”

Reported by CertiK Alert alone, with no second source or primary confirmation yet

1 independent source group across 1 post · evidence score 68/100. How labels work

What the sources claim

CertiK states that Intents credited the attacker as part of the failure chain.

“Intents credited the attacker”
CertiK Alert
CertiK states that an oversized refund log failed the resolver.

“an oversized refund log failed the resolver”
CertiK Alert
CertiK states that HOT returned the backing while the credit survived.

“HOT returned the backing while the credit survived”
CertiK Alert
CertiK says its report traces the preparation, receipts and cash-outs with source-code citations.

“Our report traces the preparation, receipts and cash-outs, with source-code citations.”
CertiK Alert

Sources

CertiK Alert security 2026-10-10 03:02 UTC
1/ The unusual part was the failure chain: Intents credited the attacker → an oversized refund log failed the resolver → HOT returned the backing while the credit survived. Our report traces the preparation, receipts and cash-outs, with source-code citations.

More in Hacks & Security

All Hacks & Security stories →

Summary and claims extracted by AI with prompt analyze-story@3 on 2026-10-11 00:00 UTC. Labels are computed from the sources, not by the model.