- The ORE Protocol team has discovered a flaw in its smart contract, which allowed hackers to falsely claim 25.5 SOL tokens for the harvest.
- According to the government, the error was in the intelligence agreement, and there was no major use.
- Users will have to migrate to the new staking smart contract to generate rewards.
On June 17, the ORE protocol on the Solana blockchain announced that it had detected a bug in the staking program and responded quickly to fix the issue. However, a security incident in the existing smart contract on the Solana blockchain has allowed hackers to steal 25.5 SOL tokens from the protocol harvester, which is worth about $2,215.
“All User Deposits Are Safe,” ORE Group Confirms After Security Incident
ORE, which is the proof of the mining activity on Solana, revealed the details of the security activities through a post on X. The group confirmed that they have identified “An attack on a price program leads to an unfair distribution of productivity.” However, the damage was minimal compared to recent cyber attacks on DeFi platforms.
The team has made sure that “All user deposits are safe. There is no risk of losing money. “
ORE program be explained that the security event was connected to a remote intelligent contract error in the staking program, and it did not affect the network or the main mining system. “The program excludes user fees. Each account has an independent account, meaning that the attacker could not steal the deposits of other users. The program has sufficient reserves to cover all costs of use and production. The result was limited to an unfair distribution of productivity,” he said in a letter to X shareholders.
For the protocol, users enter their SOL or ORE tokens smart contracts connected to the protocol mining game. In this mining environment, miners work on a 5×5 grid to generate rewards. Apart from this, the calculation method on the protocol allows them to create productivity. However, like many other DeFi protocols, it has some risks if the smart contracts are not properly evaluated.
ORE Protocol Asks Users to Migrate to New Smart Contract
According to the government, the error was in the smart contract code of the staking program. Using this flaw, hackers falsely claimed 25.5 SOL tokens after increasing their power. value profile without tokenization. This is very small compared to the big hacks, and the ORE team has been able to avoid using this process with quick security measures.
The group said that individual user agreements were not affected in the cyber attack, and no significant amounts of money were stolen from the user.
When the issue came to light, the ORE protocol maintainers quickly suspended all of them output from the mining program to the stable program on June 15, 2026. At this time, the hacker is raised about 6% of the total amount.
In order to avoid any other spending, the group said that all users with old smart contracts should withdraw their money, and they should move to a new contract to receive rewards.
Apart from this, a ore-lst liquid staking program (stORE) it is also stopped and depends on the affected program. The ORE team has also created a new token agreement stORE as part of the migration. It means that users of stORE tokens will also need to exchange for new stORE coins as part of the process.
The post said, “Funds in the premium program are protected by user wallets only. Protocol maintainers do not have the power to upgrade contracts or sORE contracts, and therefore cannot transfer shares on behalf of users. Just one click migration is provided on Price ORE’s official program page.”
This cyber attack is a tactical error, which is mainly related to problems such as poor account management, attacks that reuse closed accounts, or authentication gaps, which are common on Solana. In the past, ORE has also experienced network congestion due to increased user traffic; however, it is based on V2 with better options.
Over the past few months, the DeFi sector has faced a number of major cyber threats, including Kelp DAO attack, in which users lost millions of dollars, affecting the entire DeFi ecosystem.
