Kinto K token contract on Arbitrum was exploited on July 10, 2025 via hidden/uninitialized proxy implementation slot (CPIMP-class vulnerability), allowing attacker to mint ~110K counterfeit tokens and drain ~577 ETH from lending pools; K token lost ~95% value.