Xave Finance Hack

TOTAL LOST
Other

What happened

Xave Finance was exploited and the hacker was able to mint over 99% of the $RNBW token's original supply. The accident dropped the token price by more than 99%.

Xave Finance also known as HaloDAO is a platform that aims to provide DeFi operations to traditional financial institutes. $RNBW is an ERC20 token of the project, that is listed on Coinbase. The hacker deployed a smart contract to exploit the DaoModule contract and executed the proposal to take ownership of the contract.

Consequently, the attacker minted 100,000,000,000,000 $RNBW tokens to his address and swapped them for 89,000,000,000,000 $xRNBW tokens. All the stolen amounts sit at the hacker's address at the moment, and their value is unknown.

Attacker address:

https://etherscan.io/address/0x0f44f348…1fc1e2

Malicious contract:

https://etherscan.io/address/0xe167cdaa…ee86d3

Malicious transaction:

https://etherscan.io/tx/0xc18ec2eb…f31f4a

Case & protocol details

Classification Token
Protocol Type DEX
Affected asset / contract RNBW
Official Website www.xave.co/

Security review history

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.