XT Exchange Hack

REPORTED LOSS $1.7M
Medium Access Control ethereum

What happened

Quick Summary

On November 28, 2024, the centralized exchange XT.com suspended withdrawals amid suspicion of a $1.7 million hack.

Details of the Exploit

Shortly before XT.com acknowledged the breach, PeckShield identified a suspicious outflow of over $1.7 million in cryptocurrency, which was subsequently swapped for 461.58 Ether (ETH). The thief carried out the transaction through an address that moved the stolen tokens from XT.com’s wallets. XT.com responded by confirming the abnormal activity and suspending withdrawals, clarifying that the pilfered funds belonged to its reserves.

The exchange also announced plans to launch a Merkle tree proof of reserves in mid-December to increase transparency.

Case & protocol details

Classification Infrastructure / CeFi / Key Compromise
Protocol Type Exploit/Access control
Official Website www.xt.com/en
Protocol Twitter/X @XTexchange

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Triple-A $11.8M
SBI Crypto $24.0M
CoinDCX $44.2M
PlayDapp $290M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes