X100 governance flaws trigger $6M loss via flash loan attack
An attacker acquired two governance seats on X100 by freezing 19,000 tokens under a one-year lock, then executed proposal 7 in a single transaction to transfer 400,000 treasury tokens to an attacker-controlled pool. The attacker swapped tokens for cash to repay a flash loan of approximately 1.94 million USDT, leaving about 4.75 million USDT for three recipients after ChainBounty reconciliation. Separately, at Arkadiko, a malicious contract gained vault authority after a five-day vote ended two days early, allowing the proposal to execute immediately after late token purchases.
The article details two distinct governance attacks exploiting timing and lock-period vulnerabilities, offering readers a comparative analysis of how token lockage and voting intervals can be manipulated to execute unauthorized treasury actions.
Source: CryptoSlate · cryptoslate.com