Bitcoin decentralized finance (DeFi) platform ALEX Protocol has lately suffered an assault, dropping $8.3 million in consumer funds. This represents the second exploit of the Stacks-based challenge in simply over a 12 months following a earlier heist by the infamous North Korean Lazarus hackers group from North Korea.
ALEX Protocol Falls Sufferer To Self-Itemizing Verification Flaw
In an X put up on June 6, the event workforce behind the ALEX Protocol introduced the DeFi challenge skilled an exploit attributable to a vulnerability in its self-listing verification logic i.e. a safety mechanism meant to stop unauthorized asset listings. A failure is that this safety system may probably enable dangerous actors to introduce malicious, unauthorized or pretend property to the ALEX protocol which could be exchanged for respectable property.
By slipping previous the self-verification logic, hackers had been capable of drain a number of asset swimming pools making away with 8,403,867.57 Stacks (STX), valued at $5,691,255.93, 21.85 sBTC ($2,244,751.87), 149,850 USDC/USDT ($149,850), and a couple of.80 WBTC ($287,369.33) resulting in a complete haul of $8,373,227.13.
ALEX Protocol Declares Compensation Plan
Following this current cyber assault, the builders behind ALEX Protocol has pledged to cowl all consumer losses utilizing the ALEX Lab Basis Treasury. All compensation will probably be paid in USDC and primarily based on the common on-chain trade worth of the stolen property on the time of the exploit between 10:00 UTC – 14:00 UTC on June 6,2025.
By 23:59 UTC on June 8, all affected wallets ought to have acquired a non-public on-chain notification alongside a declare type. The claimants are anticipated to fill the shape which ought to embody a receiving pockets tackle earlier than continuing to submit forward of the deadline on June 10 by 23:59 UTC.
The ALEX Protocol administration workforce additional states that each one affected wallets ought to count on a full compensation inside seven days after the submitted type is verified. It’s price stating that each one victims with questions or those that fail to obtain notification electronic mail earlier than specified deadline are suggested to succeed in out by way of the e-mail said within the announcement.
The ALEX Protocol is constructed on the Bitcoin community utilizing the Stacks blockchain. It’s a standard DeFi platform providing a spread of companies, together with lending, borrowing, and buying and selling. Moreover, ALEX helps cross-chain bridges, enabling customers to switch property seamlessly from different networks resembling Ethereum and BNB Sensible Chain.
As earlier said, the DeFi challenge had suffered a earlier exploit in Might 2024 when the Lazarus group withdrew $4.5 million by the platform’s bridge on the BNB Sensible Chain Community.
Featured picture from iStock, chart from Tradingview
Editorial Course of for bitcoinist is centered on delivering completely researched, correct, and unbiased content material. We uphold strict sourcing requirements, and every web page undergoes diligent evaluate by our workforce of high know-how consultants and seasoned editors. This course of ensures the integrity, relevance, and worth of our content material for our readers.