The DeFi protocol ALEX on Stacks was exploited on June 6, 2025, due to a token listing validation bug, resulting in a loss of about $8.37 million, including 8.4M STX, 21.85 sBTC, 149,850 USDC/USDT, and 2.8 WBTC. The vulnerability was in the on-chain self-listing verification logic.

ALEX Lab Foundation will fully reimburse affected users in USDC based on average on-chain rates between 10:00–14:00 UTC on June 6, 2025. Affected users will receive a private on-chain notification with a claim form before 23:59 UTC on June 8. The claim submission deadline is 23:59 UTC on June 10. Compensation payments will be made within 7 business days after verification.