WaveX Hack
What happened
On December 6, 2025, waveX protocol detected an abnormal transaction exploiting a vulnerability in their vault-related contract logic, resulting in approximately $430,000 in losses after prompt mitigation; the team immediately initiated investigation and containment procedures, with the impact limited to vault contracts while staking and other components remained unaffected, and waveX has committed to fully compensating all user losses with withdrawals scheduled to resume on December 16, 2025.
The exploit targeted a vulnerability within waveX's vault-related contract logic, though specific technical details of the attack mechanism have not been publicly disclosed. Following detection of the abnormal transaction, the waveX team immediately implemented containment measures that limited the total impact to approximately $430,000, preventing further exploitation. The vulnerability was isolated to the vault contracts, with the team confirming that staking contracts and other protocol components were not compromised.
In response, waveX temporarily restricted certain protocol functionalities to conduct a comprehensive security inspection and is preparing an upgraded version with significantly strengthened security measures and defense mechanisms.
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report x.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.