ALEX agreement was attacked and lost $8.37 million, promised to pay in full
The Stacks-based DeFi ALEX protocol was attacked on June 6, 2025 due to a logical vulnerability in self-listing verification, resulting in the theft of multiple asset pools with a total loss of $8.373 million. The lost assets include 8.4 million STX (~ $5.69 million), 21.85 sBTC (~ $2.24 million), 149,000 USDC/USDT, and 2.8 WBTC (~ $287,000).
The ALEX Lab Foundation has promised to compensate all affected users in full in the form of USDC. The compensation process will be notified to affected wallets by June 8, and users need to submit claims by June 10, and the compensation will be completed within 7 working days after verification.