Breaches and incidentsBriefConfirmed by two or more outlets
Pirate Chain: about 39.8M ARRR minted through two validation bugs
14 Oct 2026: about 39.8M ARRR (roughly 20% of the 200M cap) was created without authorization and moved into the Sapling shielded pool.
- Disclosed
What happened
- 14 Oct 2026: about 39.8M ARRR (roughly 20% of the 200M cap) was created without authorization and moved into the Sapling shielded pool. No reliable USD figure; one tracker lists about USD 10.7M.
- Root cause per the team as reported: two separate validation failures tied to the Ironwood upgrade (activated 3 Oct), one bypassing the issuance check and one misreading output scripts. The team says notary keys and zk-SNARK cryptography were not compromised.
- Attribution: none.
- Response: users told not to move funds, exchanges asked to pause. A rollback to pre-exploit state was proposed. Reports conflict on whether it was executed (v6.0.14) or replaced by a hard-fork plan. Status unresolved in the sources checked.
Sources
- https://cryptobriefing.com/pirate-chain-exploit-arrr-rollback/
- https://www.analyticsinsight.net/news/pirate-chain-exploit-mints-398-million-arrr-raising-supply-by-20
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.