talha
6.5K posts

talha
@talhasch
tbb.btc | Trying to find balance with everything.







Notice: Incident Report on Recent Exploit ALEX Protocol recently experienced an exploit that led to a partial loss of funds. We were able to detect and contain the attack early, minimizing further impact. The attacker exploited a flaw in verification logic in the self-listing function by referencing a failed transaction, allowing a malicious token to bypass checks and transfer funds from liquidity pools. The core issue stems from a current on-chain limitation, specifically the inability to reliably detect failed transactions on Stacks. Immediate Response: - We are actively pursuing recovery. - We have identified and patched the vulnerability to prevent similar attacks going forward. - Self-listing functionality has been paused while we conduct a comprehensive security review. - Our team is working closely with security and ecosystem partners to trace and assess the full scope of the loss. A full post-mortem will be published once our investigation is complete.













