WaveX Hack

TOTAL LOST $430K
Low Other

What happened

On December 6, 2025, waveX protocol detected an abnormal transaction exploiting a vulnerability in their vault-related contract logic, resulting in approximately $430,000 in losses after prompt mitigation; the team immediately initiated investigation and containment procedures, with the impact limited to vault contracts while staking and other components remained unaffected, and waveX has committed to fully compensating all user losses with withdrawals scheduled to resume on December 16, 2025.

The exploit targeted a vulnerability within waveX's vault-related contract logic, though specific technical details of the attack mechanism have not been publicly disclosed. Following detection of the abnormal transaction, the waveX team immediately implemented containment measures that limited the total impact to approximately $430,000, preventing further exploitation. The vulnerability was isolated to the vault contracts, with the team confirming that staking contracts and other protocol components were not compromised.

In response, waveX temporarily restricted certain protocol functionalities to conduct a comprehensive security inspection and is preparing an upgraded version with significantly strengthened security measures and defense mechanisms.

Case & protocol details

Classification Exchange (DEX)
Protocol Type Derivatives
Official Website wavex.fi/
Protocol Twitter/X @waveX_fi

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.