An attacker acquired two seats in X100’s Senate and then, in a single blockchain transaction, authorized a swap of 400,000 X into a pool it had created and repaid a flash loan of roughly 1.94 million USDT. About 4.75 million USDT reached the first final recipient, while ChainBounty identified 4.848 million USDT paid to three selected recipients, excluding unsold X. On Arkadiko, a late purchase of roughly 4.573 million DIKO, estimated at $51,000, enabled a malicious contract to activate when the vote closed and cause a loss of approximately $1.09 million. Arkadiko restored its legitimate contract on Oct. 27, but that measure does not guarantee recovery of collateral or compensation for victims. These incidents show that token lockups, voting-power age and execution delays address different governance risks.
Source: Read the original article
