Loving my lil sus cuties 🐸

Password robinhood:0x4db7374e966097be94c6680d49156d580f097bbf

XPR Network Got Hit Again. Here Is What Is Confirmed And What Is Not Early on October 17 UTC, an attacker went after XPR Network. By the account of block producer MadBlocks, it failed. I want to separate what I could confirm from what I only found in one place. What the block producer reported An account called rohtie1 used the exploit at 02:35 UTC to control 67 accounts and borrow about $1.32 million from the LOAN Protocol. The attacker then tried to bridge 1,143,288 USDC to an Ethereum address. The bridge never released the funds, and by 05:08 UTC the full amount was back in LOAN. Reported, but I found no second source Several details come from one AI summary of MadBlocks' threads. The entry point was said to be the webauthn system contract, unchanged since August 2022. The attacker was said to swap about 254 million XPR for roughly 380,000 USDC on proton.swaps, pushing the price down 10 to 13 percent for a short time. LOAN was said to be paused at 03:12 UTC and the contract patched at 03:46 UTC. These fit the timeline, but I am treating them as unconfirmed until MadBlocks or the team publishes a full write up. The part that is documented This is the second incident in about five weeks. On September 12, proton.swaps was drained through a withdrawal function that accepted negative amounts. About $9 million was taken, with around 2.12 billion XPR touched. Block producers patched it and seized roughly 1.8 billion XPR, and only about 319.5 million reached venues outside the network. What I could not find No incident report from Metallicus or XPR Network. No statement from Marshall Hayner on this event. No entry about it on the official status page when I checked. Silence this early does not prove anything, but it is the gap to watch. My read Two things are true at once. The recovery tools worked. Block producers can pause markets and pull funds back within hours, which many chains cannot do. But two exploits in five weeks points to old code that was never stress tested, and recovery by block producers is also a form of control. People who like the chain should be honest that they are relying on it. What would raise my confidence is a full public post mortem and an independent audit of the system contracts. I hold XPR, so weigh this accordingly. I am not calling the project a scam. I am saying the standard for trust here is a published report, not a recovery story. 🛡