What happened
On June 21, 2026, the Quicksilver interchain liquid-staking zone suffered a protocol-logic exploit in which forged delegation proofs caused unbacked qAssets to be minted; the recorded loss was approximately $3,500.
Quicksilver's interchain liquid-staking issuance path did not properly authenticate proof origin or validity before deriving qAsset issuance from the claimed delegation data. Unchecked proof inputs could therefore create unbacked supply.
How it happened
The attacker submitted forged ICA/ICQ-style delegation or receipt proofs. The affected issuance path accepted those inputs as genuine, minted qATOM and qOSMO without corresponding host-chain collateral, and left the attacker with unbacked liquid-staking tokens.
Protocol details
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
