RISEx disclosed an unauthorized 673,011.56 USDC withdrawal from its XLP treasury tied to an RWA strategy, caused by a vault configuration error present since deployment. Although detected and remediated within roughly an hour, the event underscores smart-contract and operational risk in DeFi treasury management. Near term, it can pressure confidence, trigger liquidity rebalancing, and widen risk premia around platform-related stablecoin flows.
Impact level
● Medium
AI InsightAI Insight
▼ Bearish
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
Decentralized exchange RISEx reported an unauthorized withdrawal of 673,011.56 USDC from its XLP Treasury real-world asset (RWA) strategy. The incident occurred at 07:21 UTC due to a configuration error that had persisted since the strategy's initial deployment on July 13. According to RISEx, the irregularity was detected within minutes of the breach, allowing the technical team to implement a fix by 08:09 UTC. The exchange clarified that the vulnerability stemmed from a misconfiguration in the vault's parameters rather than a direct external exploit of the underlying protocol logic. While the funds were withdrawn without authorization, the rapid response aimed to secure the remaining assets in the XLP vault. RISEx continues to monitor the situation to ensure the stability of its RWA-focused investment products and has communicated the timeline of events to its user base.