ALEX Protocol was exploited via a flaw in the self-listing verification logic (an on-chain limitation on Stacks).
As a result, the attacker drained several asset pools, with the breakdown of lost assets as follows:
- STX: 8,403,867.57 STX → $5,691,255.93
- sBTC: 21.85 sBTC → $2,244,751.87
- USDC/USDT: 149,850 USDC/USDT → $149,850.00
- WBTC/BTC: 2.80 WBTC → $287,369.33
Total USD Value Lost: $8,373,227.13
Using the ALEX Lab Foundation treasury, ALEX Protocol will cover 100 % of each affected user’s loss, paid in USDC.