News linked to both this project and an event.
Wasabi Protocol released a security incident update, stating that the attacker exploited a Spring Boot Actuator configuration vulnerability in its AWS infrastructure to steal private keys controlling EVM smart contracts, and subsequently drained approximately $4.8 million in user funds and $900,000 from the protocol’s treasury—totaling roughly $5.7 million in losses. The attack chain originated from a public-facing analysis server whose Actuator heap dump was not properly password-protected, enabling the attacker to obtain credentials for another server and ultimately gain control of the smart contract private keys. This incident affected only EVM deployments—including certain treasuries on Ethereum, Base, Blast, and Berachain—while Solana deployments and the Prop AMM remained unaffected. No final user compensation plan has been announced yet; however, “ensuring all affected users are compensated” remains the team’s top priority. Updates on the investigation will be shared with the community via Discord.
According to the official announcement, HTX has launched the “Spring Travel Season” trading competition. From now until May 9 at 18:00 (UTC+8), users who register and participate in spot trading of BTC, ETH, SOL, XMR, or LTC—or USDT-denominated perpetual contracts of DOGE, PEPE, XAG, TRUMP, or XMR—and complete designated tasks will accumulate “Miles.” Prizes totaling $50,000 will be distributed among participants based on their Mile rankings. Additionally, users who fulfill both the spot holding requirements and complete daily contract trading check-ins for the entire duration will qualify for a lottery draw, sharing an extra $1,500 prize pool.