TREE NEWS update: Ethereum DeFi project X100 was hit by a governance attack on Oct. 24, with roughly 4.85 million USDT stolen. The attacker used an Aave flash loan of about $1.94 million to buy X tokens and seize two of the three Senate governance seats, then passed a malicious proposal selling 400,000 X into a self-created PancakeSwap pool for about $35.68. The X token’s market cap fell from about $760 million to $24 million, a single-day drop of over 96%.
X100 DeFi Project Loses $4.85M in Flash-Loan Governance Attack
This attack is a stark reminder that governance mechanisms, not just smart contracts, are a critical attack surface for DeFi protocols. The use of a flash loan to temporarily acquire voting power shows how quickly a project's entire value can be undermined when token-based governance lacks safeguards like time locks or quorum requirements. The collapse in X's market cap underscores how fragile confidence can be in projects with concentrated governance power. What's worth watching is whether other projects with similar three-seat or low-quorum governance models face renewed scrutiny, and whether the incident prompts broader discussion about flash-loan-resistant governance design.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.