Hacking News
X100 Governance Flaws Lead to Flash Loan Repayment and Treasury Swap
An attacker in the X100 token project used a flash loan to repay theft proceeds while its stake remained frozen. The attacker then executed a treasury swap, acquiring two governance seats and approving the transaction in a single blockchain operation on October 24. This incident highlights vulnerabilities in the project's governance mechanisms, including a lack of compulsory waiting periods and the ability to execute proposals with a majority of currently ranked Senate seats.