QoreChain - Stolen Asset Notice · 22 August 2026 On 21 August 2026 at 15:05:17 UTC, an authorization flaw in QoreChain's SVM execution lane was exploited by a single transaction, moving 3,743,391,061.95 QOR from 58 accounts that had not authorized the transfer. The network was halted 25 minutes later and all 3,743,391,061.95 QOR were restored on-chain. Those assets are not the subject of this notice. 4,000,000 QOR left the QoreChain network before the halt, were deposited to MEXC and sold. Those assets, and any proceeds from their sale, are stolen assets. Amount involved: 4,000,000 QOR and any proceeds of sale Transaction references - Attacker's account funded with 705.000000 QOR withdrawn from MEXC - 15:01:13 UTC, block 1,962,147, tx 92E7FB4DFBAF16C2B47B462F68C063F12D9E95F673F0D6BD1C4A2F7553B935A5 - Exploit transaction - 15:05:17 UTC, block 1,962,252, tx 29ABE94EC82505081A919FBAE035A1FA88261A3FBCF043E49FA8C90C4B2981CB - Transfers of 1,000,000 QOR (~15:07 UTC) and 3,000,000 QOR (~15:16 UTC) from qor1y32dxtv8x2y02upmdt6c04jd7qvgk9hnhpr6d6 to MEXC Note: network recovery rewound chain state to block 1,962,251, the last block before the attack. The exploit transaction and everything after it no longer resolve on the canonical chain. Pre-recovery block data is preserved in full in our forensic archive and has been provided to MEXC. Timeline - 21 August 2026, UTC - 15:01:13 - attacker's account funded with 705 QOR withdrawn from MEXC - 15:05:17 - exploit transaction, block 1,962,252 ~15:07 - 1,000,000 QOR transferred to MEXC and sold ~15:16 - 3,000,000 QOR transferred to MEXC and sold - 15:30:33 - QoreChain mainnet halted at block 1,962,905 - 15:29 - QoreChain requested suspension of QOR deposits and withdrawals; MEXC actioned - 18:40 - recovery launched across the validator set, target block 1,962,251 ~21:27 - network restarted on corrected build; all balances verified individually As a result of the above, QoreChain has requested MEXC to temporarily restrict the account(s) suspected to be involved in this matter. - mexc.com/announcements/artic… QoreChain is covering the full 4,000,000 QOR from its insurance fund so that no good-faith buyer is affected, regardless of what is recovered. Formal legal action is being initiated on the basis of the preserved forensic evidence. Full incident report on Monday, Aug. 24 QoreChain Team Liviu Epure, Founder 22 August 2026