-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0275
============================================================

Advisory-ID:  0xCERT-2026-0275
Severity:     High
Published:    2026-10-24T00:00:00.000Z
Updated:      2026-10-25T07:13:32.292Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0275

Title: X100 Global Senate Governance Takeover

Summary
- -------
A flash loan bought two of three governance Senate seats in a single block, passing a malicious proposal that drained roughly $4.85M from X100 Global's treasury.

Details
- -------
Summary
A flash loan bought two of three governance Senate seats in a single block, passing a malicious proposal that drained roughly $4.85M from X100 Global's treasury.

Incident
- - Victim: X100 Global
- - Date (UTC): 2026-10-24
- - Estimated loss: $4.8M
- - Chain(s): Ethereum
- - Attack type: flash-loan exploit
- - Funds status: stolen

Recommended actions
- - Revoke token approvals granted to X100 Global contracts until the project confirms they are safe
- - Integrators: pause or delist affected assets and monitor for attacker fund movements
- - Beware of follow-on phishing: ignore unofficial "refund", "recovery", or "claim" links and DMs; use the project's verified channels only

Source & attribution
Full analysis on Blockchain Breaches, 0xCERT's incident archive: https://www.blockchainbreaches.com/en/breaches/x100-2026. Primary sources: https://news.bitcoin.com/security/x-100-global-loses-millions-as-three-seat-senate-is-hijacked/ ; https://phemex.com/news/article/x100-attackers-exploit-governance-system-to-drain-485m-in-treasury-tokens-and-liquidity-100918 ; https://cryptoadventure.com/x100-loses-4-85-million-as-flash-loan-attack-hijacks-governance/ ; https://www.kucoin.com/news/flash/x100-global-suspected-governance-attack-steals-4-75m-via-exploited-vulnerability.

References
- ----------
- - https://www.blockchainbreaches.com/en/breaches/x100-2026
- - https://news.bitcoin.com/security/x-100-global-loses-millions-as-three-seat-senate-is-hijacked/
- - https://phemex.com/news/article/x100-attackers-exploit-governance-system-to-drain-485m-in-treasury-tokens-and-liquidity-100918
- - https://cryptoadventure.com/x100-loses-4-85-million-as-flash-loan-attack-hijacks-governance/
- - https://www.kucoin.com/news/flash/x100-global-suspected-governance-attack-steals-4-75m-via-exploited-vulnerability
- - https://github.com/SunWeb3Sec/DeFiHackLabs/pull/1310

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmreCm0JEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmdf/6DpTsyhrxcistHlJpFuBF+tFbVoHD7U5nyk
QphNShYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAAD9SwEAqQoH/w4whaeqZbCd
nsKvuJYnxwkhO+Yjr9weAOcKMKUA/iI7MsrcmVlO8Pc0Z9UpKsee8kWlJBnB
n9FLNYs4i5sP
=LTv9
-----END PGP SIGNATURE-----