On June 7, the DeFi protocol ALEX based on Stacks announced that due to a vulnerability in the listing verification logic, attackers extracted funds from multiple asset pools, with a total loss of approximately $8.37 million. Specific losses are as follows:
STX loss of 8.4 million STX (approximately $5.69 million), sBTC loss of 21.85 sBTC (approximately $2.24 million), USDC/USDT loss of 149,850 (approximately $14,980), and WBTC/BTC loss of 2.80 WBTC (approximately $287,400).
The ALEX Lab Foundation will use its treasury to fully compensate the losses of each affected user, with compensation to be paid in USDC. Compensation calculation will be based on the average on-chain exchange rate between 18:00 and 22:00 on June 6, 2025. Affected wallet addresses will receive private notifications before 7:59 on June 9, 2025, including a claim form. The claim form must be submitted before 7:59 UTC on June 11, 2025, confirming the receiving wallet address. After confirmation, the compensated USDC will be sent within 7 working days.
