YFarmX logoYFarmX

Tools Crypto Exploit Tracker exploit-0158

Exploit record

WAX bridge incident releases assets without the matching debit

Loss
$91k
Attack vector
Bridge Exploit
Chain
Multichain
Sector
Bridge

What happened

WAX confirmed a bridge incident and processing pause. SlowMist estimated about $90,500 affected; Blockaid described withdrawals releasing assets on Ethereum and Solana without the matching WAX-side payment.

Blockaid’s list includes USDC, USDT, DAI, wrapped Ether and wrapped Bitcoin. SlowMist described a negative-fee input reducing the debit to zero. The dollar amount is its contemporaneous estimate, rather than a new valuation of the assets or a final recovered-loss figure. The historical pause does not establish the bridge’s current operating status.

Sources

One record from the Crypto Exploit Tracker, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 25 October 2026