Security· ★★★★· bearish·

Flash-loan governance attacks on X100 and Arkadiko cost about $6M

  • —X100: two helper contracts froze 19M X each and executed proposal 7 in a single transaction
  • —The treasury swap sent 400K X into an attacker pool; about $4.85M USDT reached recipients
  • —Arkadiko: voting tokens worth about $51K were bought minutes before the ballot closed
  • —Arkadiko losses: about $780K stSTX, $135K sBTC and $173K STX
Why it matters: The incidents show that token locks and long voting windows fail to stop governance attacks without execution delays and voting-power snapshots.
Source: Cryptonews.net