Digital Asset
Intelligence
Security Incident

xToken Flash Loan Attack: $4.50M Reported Loss

·Historical incident record

Incident Overview

The DeFi pledge and liquidity strategy platform xToken, which suffered a lightning loan attack, released an analysis report on the vulnerability of the xSNX contract. At 4:43 UTC on August 29th, a vulnerability in the xSNX contract was exploited, and the holder's loss was estimated to be 4.5 million U.S. dollars. xToken believes that it is best to stop providing xSNX products at this time. xToken stated that it will no longer use the xSNX contract for SNX pledge.

Sources & References

Original incident referencehttps://medium.com/xtoken/xsnx-post-mortem-666d35071f38 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    xToken

    Attack methodOracle Attack
    Reported loss$ 25,000,000
  2. Incident date
    Target

    Bilaxy

    Attack methodWallet Stolen
    Reported loss$ 21,709,378
  3. Incident date
    Attack methodFlash loan attack
    Reported loss$429,724
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  5. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000