PinGo has confirmed that its reward contract was exploited after an attacker discovered an authorization verification flaw, allowing the illegal claim of 840,000 PINGO tokens. According to an official statement, the company has brought the incident under control.
PinGo stated that all remaining assets have been migrated to secure wallets and the affected contract has been upgraded to prevent further exploitation. The company emphasized that PINGO tokens and related private keys remain secure, and the reward-claiming function has been reopened for legitimate users.
The exploit did not compromise the broader PinGo ecosystem, and users are advised to continue using the platform with confidence. Further details on the vulnerability are expected to be released in a technical post-mortem.