Press Enter to search · ESC to close

Crypto DeFi

X100 DeFi Project Loses $4.85M in Flash-Loan Governance Attack

Ethereum DeFi project X100 was hit by a governance attack on Oct. 24, with roughly 4.85 million USDT stolen. The attacker used an Aave flash loan of about $1.94 million to buy X tokens and seize two of the three Senate governance seats, then passed a malicious proposal selling 400,000 X into a self-created PancakeSwap pool for about $35.68. The X token’s market cap fell from about $760 million to $24 million, a single-day drop of over 96%.

Original source

AI take

This attack is a stark reminder that governance mechanisms, not just smart contracts, are a critical attack surface for DeFi protocols. The use of a flash loan to temporarily acquire voting power shows how quickly a project's entire value can be undermined when token-based governance lacks safeguards like time locks or quorum requirements. The collapse in X's market cap underscores how fragile confidence can be in projects with concentrated governance power. What's worth watching is whether other projects with similar three-seat or low-quorum governance models face renewed scrutiny, and whether the incident prompts broader discussion about flash-loan-resistant governance design.

Generated by AI for reference only.

Share

Related News

TREE NEWS share card
Long-press image above → Save to Photos / Share
Pitch us Feedback