{"id":79229,"date":"2026-10-08T10:16:08","date_gmt":"2026-10-08T10:16:08","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/hackers-attack-another-bitcoin-project-as-arks-second-exploited\/"},"modified":"2026-10-08T10:16:08","modified_gmt":"2026-10-08T10:16:08","slug":"hackers-attack-another-bitcoin-project-as-arks-second-exploited","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/hackers-attack-another-bitcoin-project-as-arks-second-exploited\/","title":{"rendered":"Hackers Attack Another Bitcoin Project as Ark&#8217;s Second Exploited"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<div class=\"@container mb-[25px] rounded-sm overflow-clip py-0.5 pr-0.5 pl-2.5 bg-success-100\">\n<div class=\"flex flex-col gap-m overflow-clip rounded-[6px] !bg-success-10 p-3 @[420px]:p-m\">\n<h2 class=\"m-0 flex items-center gap-s text-[19px] !text-[#1c1c1c] md:text-[20px]\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"10\" viewbox=\"0 0 16 10\" fill=\"none\" class=\"shrink-0 text-success-100\" aria-hidden=\"true\"><path d=\"M1 1.5h14\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><path d=\"M1 8.5h10\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><\/svg><span>Key Takeaways<\/span><\/h2>\n<ul class=\"m-0 flex list-none flex-col gap-m pl-0\">\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Second lost 0.75 BTC in an exploit targeting its Ark server.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">The team said no user funds were affected and shipped a fix within hours.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Attackers also launched a DoS attack and tried to use bitcoin linked to the Blink Wallet breach.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p>Per the team, \u201cno user funds were affected.\u201d The attack was caught within hours, and a<a href=\"https:\/\/x.com\/secondhq\/status\/2108065406665805992\" target=\"_blank\" rel=\"noopener noreferrer\"> fix has been shipped<\/a>. However, the criminals kept trying to extract more from the project, resulting in a DoS attack. The team disclosed the denial-of-service attack Tuesday, warning that it could degrade Lightning Network receives on Bark-based wallets. Bark is an implementation of the Ark protocol, developed by Second.<\/p>\n<h2>\u201cDesign Did Its Job\u201d<\/h2>\n<p>According to the team, the attackers exploited a bug in their Ark server\u2019s boarding flow Monday. During boarding, onchain bitcoin is moved onto Ark. This process is supposed to be co-signed by their server.<\/p>\n<p>\u201cA bug let the attacker register boards with only his own signatures, then exit those boards back to his own wallet while also spending the same VTXOs out of our node via Lightning,\u201d Second explained. Similar to <a href=\"https:\/\/www.bitcoin.com\/get-started\/bitcoin\/technical\/what-are-bitcoin-utxos\" target=\"_blank\" rel=\"noopener noreferrer\">UTXOs<\/a> in onchain bitcoin, BTC on Ark is represented by VTXOs (Virtual Transaction Outputs) in a wallet.<\/p>\n<p>According to Second, its users\u2019 funds are safe because VTXOs are already on pre-signed exit paths and its server can\u2019t spend them.<\/p>\n<p>\u201cThe design did its job, even if we\u2019d rather have demonstrated it another way,\u201d the team added.<\/p>\n<h2>A Link to the Blink Theft<\/h2>\n<p>What\u2019s more, Second said it found that the hacker tried to use bitcoin linked to the security <a href=\"https:\/\/news.bitcoin.com\/security\/blink-wallet-hit-by-attacker-few-dozen-custodial-accounts-drained\/\">breach of Blink Wallet on Sept. 19<\/a>. However, the attacker failed to do so and had to fund the boards from their own address before exiting back to it.<\/p>\n<p>The Ark Protocol is a layer-two technology for the Bitcoin network, designed for fast and cheap off-chain transactions while expanding bitcoin\u2019s use cases. Besides Second, other teams, such as Ark Labs, are developing implementations of Ark.<\/p>\n<div class=\"not-prose my-3 lg:my-4\">\n<div class=\"overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] hidden md:flex md:flex-row md:gap-3 lg:hidden\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\" href=\"https:\/\/news.bitcoin.com\/liquid-hack-bull-bitcoin-users-facing-30-day-wait-reclaim-btc\/\"><\/p>\n<div class=\"absolute left-2 top-2\"><img alt=\"Bitcoin.com News\" loading=\"lazy\" width=\"28\" height=\"28\" decoding=\"async\" data-nimg=\"1\" class=\"size-7\" style=\"color:transparent\" srcset=\"\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=32&amp;q=75 1x, \/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75 2x\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75\"\/><\/div>\n<p><\/a><\/div>\n<div class=\"overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] hidden lg:flex lg:flex-row lg:gap-4\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\" href=\"https:\/\/news.bitcoin.com\/liquid-hack-bull-bitcoin-users-facing-30-day-wait-reclaim-btc\/\"><img alt=\"Liquid Hack Leaves Bull Bitcoin Users Facing 30-Day Wait to Reclaim BTC\" loading=\"lazy\" decoding=\"async\" data-nimg=\"fill\" class=\"object-cover\" style=\"position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent\" sizes=\"150px\" srcset=\"\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=32&amp;q=75 32w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=48&amp;q=75 48w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=64&amp;q=75 64w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=128&amp;q=75 128w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=256&amp;q=75 256w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=384&amp;q=75 384w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=640&amp;q=75 640w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=828&amp;q=75 828w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=1080&amp;q=75 1080w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=1200&amp;q=75 1200w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=1920&amp;q=75 1920w\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F09%2Fbull-bitcoin-users-face-a-30-day-wait-as-liquid-peg-outs-stays-frozen-150x150.png&amp;w=1920&amp;q=75\"\/><\/p>\n<div class=\"absolute left-2 top-2\"><img alt=\"Bitcoin.com News\" loading=\"lazy\" width=\"28\" height=\"28\" decoding=\"async\" data-nimg=\"1\" class=\"size-7\" style=\"color:transparent\" srcset=\"\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=32&amp;q=75 1x, \/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75 2x\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75\"\/><\/div>\n<p><\/a><\/p>\n<div class=\"flex min-w-0 flex-1 flex-col justify-center gap-2\">\n<p class=\"m-0 line-clamp-2 text-base leading-[1.3] !text-[#67656E]\">Earlier this week, the Canadian bitcoin exchange and wallet company Bull Bitcoin explained that customers currently cannot convert their L-BTC\u2026<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/security\/hackers-attack-another-bitcoin-project-as-arks-second-exploited\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways Second lost 0.75 BTC in an exploit targeting its Ark server. The team said no user funds were affected and shipped a fix within hours. Attackers also launched a DoS attack and tried to use bitcoin linked to the Blink Wallet breach. Per the team, \u201cno [&hellip;]<\/p>\n","protected":false},"author":3947362405,"featured_media":79230,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/79229"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/3947362405"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=79229"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/79229\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/79230"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=79229"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=79229"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=79229"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}