Security firm Blockaid said the Ethereum-based project X100 was hit by an ongoing attack, according to a ChainCatcher report. As of Blockaid’s 22:49 alert, the incident had not stopped, and two transactions had already extracted about 4.85 million USDT. Blockaid said one attacker seized two of the project’s three "Senate" governance seats and sold 400,000 X tokens from the treasury into an empty pool the attacker created. After that, a second attacker destroyed the Uniswap V3 liquidity position held by the "Freezer" contract. Blockaid has also published the related attacker addresses and sample transactions. The report did not provide additional details beyond those points, but it identified the attack as active at the time of the alert and tied the losses to the two transactions already observed on-chain.
Ethereum-based project X100 has been hit by an attack that was still ongoing as of Blockaid’s 22:49 alert, according to ChainCatcher. Blockaid said two transactions had already drained about 4.85 million USDT.
Attack sequence outlined by Blockaid
Blockaid said one attacker took control of two of the project’s three "Senate" governance seats and sold 400,000 X tokens from the treasury into an empty pool created by the attacker.
A second attacker then destroyed the Uniswap V3 liquidity position held by the "Freezer" contract. Blockaid said it has published the related attacker addresses and sample transactions.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
