VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
Root cause
Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
Forensic narrative
The DeFi pledge and liquidity strategy platform xToken, which suffered a lightning loan attack, released an analysis report on the vulnerability of the xSNX contract. At 4:43 UTC on August 29th, a vulnerability in the xSNX contract was exploited, and the holder's loss was estimated to be 4.5 million U.S. dollars. xToken believes that it is best to stop providing xSNX products at this time. xToken stated that it will no longer use the xSNX contract for SNX pledge. Attack method (per SlowMist): Flash loan attack. Reported loss: $ 4,500,000.
Sourced from
slowmist
Technical record
- chain
- —
- protocol
- xToken
- bug_class
- flashloan
- date_occurred
- 2021-08-29
- loss_usd
- $4,500,000
- source_id
- sm:xtoken::2021-08-29
Related — same bug class· flashloan