X100 Governance Attack Drains $4.85 Million in USDT

Is the X100 governance attack over?

Not according to Blockaid's October 24 updates. The security firm reported that the attack remained active after three transactions extracted approximately 4.85 million USDT and another 550,000 X tokens.

Orbitrum Investor Impact

Why does the exploit matter for X100?

The attack compromised the governance mechanism controlling X100's treasury and liquidity. This threatens the protocol's remaining assets, trading liquidity and investor confidence until governance control can be secured.

How did attackers take control of X100?

An attacker captured two of the protocol's three Senate seats, securing the majority needed to authorize treasury transactions. The attacker then directed 400,000 X tokens into a liquidity pool they controlled, while subsequent attackers exploited the same governance mechanism to withdraw additional assets.

Were all X100 treasury assets stolen?

No. Blockaid reported that approximately 12.2 million X tokens remained in the Freezer contract at 15:10 UTC on October 24. Those remaining assets were still exposed to governance risk while the exploit continued.

How does the exploit affect X token holders?

The removal of treasury assets and Uniswap liquidity weakens the trading market supporting X, potentially making tokens harder to sell without substantial price impact. The reported 4.85 million USDT loss represents assets extracted from the protocol, not a direct loss of that amount from every holder's wallet.

What must happen before X100 can recover?

X100 needs to secure governance control, prevent further unauthorized transfers and establish the final losses. The verified reports do not establish that the vulnerability has been fixed or that stolen assets have been recovered.