According to Foresight News, the Bitcoin ecosystem project ALEX tweeted that hackers controlled the management rights of a vault related to the ALEX liquidity pool and stole all assets in the vault, including about 13.7 million STX, of which about 3 million were transferred to different CEXs and are still being transferred, and some tokens are still left in the wallet. So far, the ALEX team has responded to all aBTC, aUSDT, xBTC, xUSD, ALEX, atALEX, LiSTX, LUNR, SKO, CHAX, $B20, ORDG, ORMM, ORNJ, TRIO, TX20 and STXS. The underlying smart contract code and infrastructure of ALEX have not been attacked.
The team is closely monitoring the hacker's wallet and notifying all relevant CEXs. All known CEX accounts related to the hacker have been frozen. In addition, all relevant CEXs have been asked to stop all deposit and withdrawal functions until further notice. At the same time, the ALEX team has also set up multiple alarms to monitor all suspicious addresses suspected of being created by the attacker for fund flow. In terms of fund recovery, the team has identified some of the stolen funds and is recovering them from one CEX, and completing the necessary procedures with other CEXs to facilitate the return of more funds. In addition, if the hacker does not actively cooperate in a timely manner, ALEX is prepared to report the case to the police.
The ALEX team has also made public the current forensic data shared with all relevant CEXs for the community to review. At the same time, since there is no guarantee that all stolen funds will be recovered, the team is evaluating whether to use the ALEX reserves held by the ALEX Lab Foundation to fund the Treasury Grant Program. In addition, the ALEX team is considering issuing a SIP proposal to the Stacks community to destroy STX in the Stacks community's unrecovered stolen funds wallet and issue new STX tokens to affected users.
Foresight News reported yesterday that the Bitcoin ecosystem project ALEX informed the community of the latest information on the recent vulnerability of the cross-chain bridge XLink, and is working with exchanges, partners, and ecosystem contributors to resolve the issue. Most of the funds associated with the hacker have been frozen by major exchanges. The ALEX team proposed a reward of 10% of the total stolen funds to require the hacker to return 90% of the assets. Previously, according to CertiK monitoring, preliminary evidence showed that the private key may have been leaked, and a total of approximately US$4.3 million worth of assets have been transferred to the address starting with 0x2705.
