XWin Finance Flash Loan Attack - Revision history

Azoundria at 23:59, 2 May 2023

2023-05-02T23:59:17Z

← Older revision		Revision as of 17:59, 2 May 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/xwinfinanceflashloanattack.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/xwinfinanceflashloanattack.php}}
	{{Unattributed Sources}}		{{Unattributed Sources}}

Line 6:		Line 6:
	This smart contract had an exploit, which was exploited, and $270k of user funds were taken.		This smart contract had an exploit, which was exploited, and $270k of user funds were taken.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.<ref name="slowmist-2069" /><ref name="blockthreat-1779" /><ref name="peckshieldmedium-2070" /><ref name="xwinmedium-2071" /><ref name="dappradar-2072" /><ref name="reddit-2073" /><ref name="xwinglobalmedium-2074" /><ref name="xwinfinancetwitter-2075" /><ref name="xwinfinancetwitter-2076" /><ref name="xwinfinancetwitter-2077" /><ref name="xwinfinancetwitter-2078" /><ref name="xwinfinancetwitter-2079" /><ref name="xwinfinancetwitter-2080" /><ref name="youtube-2081" /><ref name="xwinfinancetwitter-2082" /><ref name="xwinfinancetwitter-2083" /><ref name="xwinfinancetwitter-2084" /><ref name="xwinfinancetwitter-2085" /><ref name="xwinfinancetwitter-2086" /><ref name="xwinfinancetwitter-2087" /><ref name="youtube-2088" /><ref name="xwinmedium-2089" /><ref name="youtube-2090" /><ref name="xwinmedium-2091" /><ref name="xwinmedium-2092" /><ref name="xwinmedium-2093" /><ref name="xwindocs-2094" /><ref name="openblocksecgithub-2342" />
	<ref name="slowmist-2069" /><ref name="blockthreat-1779" /><ref name="peckshieldmedium-2070" /><ref name="xwinmedium-2071" /><ref name="dappradar-2072" /><ref name="reddit-2073" /><ref name="xwinglobalmedium-2074" /><ref name="xwinfinancetwitter-2075" /><ref name="xwinfinancetwitter-2076" /><ref name="xwinfinancetwitter-2077" /><ref name="xwinfinancetwitter-2078" /><ref name="xwinfinancetwitter-2079" /><ref name="xwinfinancetwitter-2080" /><ref name="youtube-2081" /><ref name="xwinfinancetwitter-2082" /><ref name="xwinfinancetwitter-2083" /><ref name="xwinfinancetwitter-2084" /><ref name="xwinfinancetwitter-2085" /><ref name="xwinfinancetwitter-2086" /><ref name="xwinfinancetwitter-2087" /><ref name="youtube-2088" /><ref name="xwinmedium-2089" /><ref name="youtube-2090" /><ref name="xwinmedium-2091" /><ref name="xwinmedium-2092" /><ref name="xwinmedium-2093" /><ref name="xwindocs-2094" /><ref name="openblocksecgithub-2342" />

	== About XWin Finance ==		== About XWin Finance ==
Line 65:		Line 64:
	!Description		!Description
	\|-		\|-
	\|June 24th, 2021 ~~12:00:00 AM~~		\|June 24th, 2021
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 73:		Line 72:
	\|		\|
	\|}		\|}

			== Technical Details ==
			This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

	== Total Amount Lost ==		== Total Amount Lost ==
Line 92:		Line 94:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
			The safest storage of assets is an offline multi-signature wallet.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

			== Platform Prevention Policies ==
			{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

	== Prevention ~~Policies ==~~		{{Prevention:Regulators:End}}
	~~The safest storage of assets is an offline multi-signature wallet.~~

	== References ==		== References ==

Azoundria at 03:46, 23 February 2023

2023-02-23T03:46:21Z

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/xwinfinanceflashloanattack.php}} XWin FinanceXWin Finance had an investment platform, where all assets were stored in a smart contract hot wallet. This smart contract had an exploit, which was exploited, and $270k of user funds were taken. This is a global/international case not involving a specific country. == About XWin Finance == "xWIN is [an] Investment Platfo..."

2023-01-27T20:44:10Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/xwinfinanceflashloanattack.php}} thumb|XWin FinanceXWin Finance had an investment platform, where all assets were stored in a smart contract hot wallet. This smart contract had an exploit, which was exploited, and $270k of user funds were taken. This is a global/international case not involving a specific country. == About XWin Finance == "xWIN is [an] Investment Platfo..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/xwinfinanceflashloanattack.php}}

[[File:Xwinfinance.jpg|thumb|XWin Finance]]XWin Finance had an investment platform, where all assets were stored in a smart contract hot wallet.

This smart contract had an exploit, which was exploited, and $270k of user funds were taken.

This is a global/international case not involving a specific country.

== About XWin Finance ==
"xWIN is [an] Investment Platform, Index and Trading Vault, Yield Farming & Yield Optimization to make investment easier than ever." "xWin is the fund management platform built with Binance Smart Chain blockchain technology. It provides fund manager to launch the funds easily and connect to investors with hassle free. xWin provide a series of sector index funds in Binance Smart Chain. We included xWIN BSC Defi Index, xWin Binance-Peg Infra Index and xWin US-ANTG Index. There will be more sector vault[s] coming."

"xWin is the decentralized fund management platform built on Binance Smart Chain. It enables everyone who is confident in their trading/fund management skills to open their own funds. Platform users can then subscribe to those funds and earn profits. Our goal was to create a one-stop DeFi protocol, where even total beginners can profit from the biggest wealth transfer in history." "Provide new value at tokenized society from Japan, Tokyo. Our specialities are the solution of the new asset management systems by blockchain and AI." "This project is in Beta. Use at your own risk."

"The DeFi protocol xWin Finance based on Binance Smart Chain was attacked by lightning loans. The xWin Finance token XWIN has fallen by nearly 90% in 24 hours."

"On June 24, 2021 xWin Finance slippage control weakness was exploited which resulted in the theft of $270K." "A Flash Loan attack has been identified in XWIN-BNB Pancakeswap LP pool."

Steps to produce: "(1) Hacker gets a flash loan as much as 76,000 BNB, equivalent to USD 11m. (2) Hacker subscribed to the old vault PCLP-XWIN LP vault. PCPL-XWIN vault is an old version vault that allow user to participate in PCS LP farming easily by subscribing to the vault. (a) Accepting BNB from user. (b) Convert 50% of the BNB into altcoin, in this case XWIN from the PCS LP v1. (c) Perform add liquidity in PCS v1 and get the LP token. XWIN-BNB PCS LP v1 still has small liquidity that allow the swapping regardless of the volume. (d) PCLP-XWIN vault will mint PCLP-XWIN token to the user as the proof of ownership of the vault. (e) xWIN Protocol recorded the entitled referral xWIN token rewards to the referral address. (3) Hacker redeemed it by calling redeem function in xWIN protocol. Redeem function will (a) accept PCLP-XWIN token. (b) Vault will unfarmed the LP token and convert the LP token back to BNB and XWIN. (c) Vault convert all the XWIN back to the BNB and send back to user. (4) By the action in 1 and 2 mentioned above, xWIN protocol recognized the subscription of 76,000 BNB and therefore marked a 76,000 x 0.20 = 15,200 xWIN token entitlement for the referral address. (5) Hacker repeated the steps of 1, 2 and 3 as many as 20 times with total of 304,000 xWIN token. (6) Hacker sent the 304,000 xWIN token to the PCS v2 pool for swapping it to 903 worth of BNB. (7) Hacker repeated the second attack with the same logic from 1 to 6. Getting away of 104 worth of BNB."

"We are currently investigating and the XWIN deposit and withdrawal has been temporarily suspended as a matter of urgency. There is no change to the number of units you have locked, so please be patient."

To prevent this, "xWIN team will be (1) Terminating the referral fee system, (2) Terminating the rewards fee system, [and] (3) Terminating manager rewards fee system. All the rewards fee and referral fee accumulated before in the referral address will be still able to withdraw from the UI in xWIN platform." "xWIN team engage third IT security party to go through the code to particularly to this area. In addition to the immediate action plans mentioned above, xWIN team continue to access to the discontinued vault that linked to PCS v1 pool and ensure they are disconnected from the xWIN protocol."

"Thank you for your encouragement for yesterday's YouTube. Today, we are going to start building a system to return the favor, communicate with a security company, establish an overseas corporation, and resume marketing activities. Beyond the moon, we are heading for Mars!"

"[W]e have decided on the details of compensation to our community at today’s executive meeting. In conclusion, we will be giving out 1:1 xWIN tokens to all users, who staked in xWIN token and XWIN-BNB LP Token in xWIN farm based on the quantity balance staked in the protocol before the flash loan attack with locking period." "[P]lease check out our instruction video on how to register for compensation!" "The deadline is 12:00 pm (Japan time) on July 2, 2021. After the deadline, you will not be able to apply for compensation."

"On the management side, we will do our best to create a better and more convenient future of the world and the future of Japan for all of our users."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - xWin Finance Flash Loan Attack
!Date
!Event
!Description
|-
|June 24th, 2021 12:00:00 AM
|Main Event
|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|}

== Total Amount Lost ==
The total amount lost has been estimated at $270,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
The safest storage of assets is an offline multi-signature wallet.

== References ==
[https://hacked.slowmist.io/en/ SlowMist Hacked - SlowMist Zone] (Jun 25)

[https://blockthreat.substack.com/p/blockthreat-week-25-2021 No Title] (Jul 23)

[https://peckshield.medium.com/xwin-finance-incident-root-cause-analysis-71d0820e6bc1 Xwin Finance Incident Root Cause Analysis] (Jul 23)

[https://xwin.medium.com/summary-of-the-misuse-of-flash-loan-against-xwin-protocol-a04f7719a0ee Summary Of The Misuse Of Flash Loan Against Xwin Protocol] (Jul 23)

[https://dappradar.com/binance-smart-chain/defi/xwin-finance xWIN Finance | DappRadar] (Jul 31)

[https://www.reddit.com/r/CryptoMoonShots/comments/ltdnfi/xwin_xwinfinance_bsc_low_mc_gem/ $xWIN xwin.finance (#BSC) Low mc gem! : CryptoMoonShots] (Jul 31)

[https://xwinglobal.medium.com/about About – xwin.finance – Medium] (Jul 31)

[https://twitter.com/xwinfinance/status/1408232268221485057 @xwinfinance Twitter] (Jul 31)

[https://twitter.com/xwinfinance/status/1408312118718304256 @xwinfinance Twitter] (Jul 31)

[https://twitter.com/xwinfinance/status/1408348970858942473 @xwinfinance Twitter] (Jul 31)

[https://twitter.com/xwinfinance/status/1408410593111932931 @xwinfinance Twitter] (Jul 31)

[https://twitter.com/xwinfinance/status/1408641503501570049 @xwinfinance Twitter] (Jul 31)

[https://twitter.com/xwinfinance/status/1408773114293460992 @xwinfinance Twitter] (Jul 31)

[https://www.youtube.com/watch?v=TPelODANEZU フラッシュローンの攻撃の分析結果とxWINの今後について① Analysis results of flash loan attacks and future of xWIN ① - YouTube] (Jul 31)

[https://twitter.com/xwinfinance/status/1408969812814950402 @xwinfinance Twitter] (Jul 31)

[https://twitter.com/xwinfinance/status/1409123054983122946 @xwinfinance Twitter] (Jul 31)

[https://twitter.com/xwinfinance/status/1409125754294521857 @xwinfinance Twitter] (Jul 31)

[https://twitter.com/xwinfinance/status/1409292454189101060 @xwinfinance Twitter] (Jul 31)

[https://twitter.com/xwinfinance/status/1410182588572995586 @xwinfinance Twitter] (Jul 31)

[https://twitter.com/xwinfinance/status/1410781475503366155 @xwinfinance Twitter] (Jul 31)

[https://www.youtube.com/watch?v=2nz-o00a8AI フラッシュローンの攻撃の分析結果とxWINの今後について② Analysis results of flash loan attacks and future of xWIN ② - YouTube] (Jul 31)

[https://xwin.medium.com/details-of-compensation-to-fans-and-users-and-future-actions-of-xwin-c8f2ea4b76d0 Details Of Compensation To Fans And Users And Future Actions Of Xwin] (Jul 31)

[https://www.youtube.com/watch?v=ifnLt-aynLI Compensation Program Explanation 2021.06.29 - YouTube] (Jul 31)

[https://xwin.medium.com/official-announcement-from-the-xwin-community-1ff31817c261 Official Announcement From The Xwin Community] (Jul 31)

[https://xwin.medium.com/details-of-compensation-program-36a3e90d13cd Details Of Compensation Program] (Jul 31)

[https://xwin.medium.com/notice-from-xwin-community-8849305db57f Notice From Xwin Community] (Jul 31)

[https://docs.xwin.finance/ xWIN Finance Intro - xWin Docs] (Jul 31)

[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 10)

← Older revision		Revision as of 21:46, 22 February 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/xwinfinanceflashloanattack.php}}		{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/xwinfinanceflashloanattack.php}}
			{{Unattributed Sources}}

	[[File:Xwinfinance.jpg\|thumb\|XWin Finance]]XWin Finance had an investment platform, where all assets were stored in a smart contract hot wallet.		[[File:Xwinfinance.jpg\|thumb\|XWin Finance]]XWin Finance had an investment platform, where all assets were stored in a smart contract hot wallet.
Line 6:		Line 7:

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.
			<ref name="slowmist-2069" /><ref name="blockthreat-1779" /><ref name="peckshieldmedium-2070" /><ref name="xwinmedium-2071" /><ref name="dappradar-2072" /><ref name="reddit-2073" /><ref name="xwinglobalmedium-2074" /><ref name="xwinfinancetwitter-2075" /><ref name="xwinfinancetwitter-2076" /><ref name="xwinfinancetwitter-2077" /><ref name="xwinfinancetwitter-2078" /><ref name="xwinfinancetwitter-2079" /><ref name="xwinfinancetwitter-2080" /><ref name="youtube-2081" /><ref name="xwinfinancetwitter-2082" /><ref name="xwinfinancetwitter-2083" /><ref name="xwinfinancetwitter-2084" /><ref name="xwinfinancetwitter-2085" /><ref name="xwinfinancetwitter-2086" /><ref name="xwinfinancetwitter-2087" /><ref name="youtube-2088" /><ref name="xwinmedium-2089" /><ref name="youtube-2090" /><ref name="xwinmedium-2091" /><ref name="xwinmedium-2092" /><ref name="xwinmedium-2093" /><ref name="xwindocs-2094" /><ref name="openblocksecgithub-2342" />

	== About XWin Finance ==		== About XWin Finance ==
Line 95:		Line 97:

	== References ==		== References ==
	[https://hacked.slowmist.io/en/ SlowMist Hacked - SlowMist Zone] (Jun 25)		<references><ref name="slowmist-2069">[https://hacked.slowmist.io/en/ SlowMist Hacked - SlowMist Zone] (Jun 26, 2021)</ref>

	[https://blockthreat.substack.com/p/blockthreat-week-25-2021 No Title] (Jul 23)		<ref name="blockthreat-1779">[https://blockthreat.substack.com/p/blockthreat-week-25-2021 No Title] (Jul 24, 2021)</ref>

	[https://peckshield.medium.com/xwin-finance-incident-root-cause-analysis-71d0820e6bc1 Xwin Finance Incident Root Cause Analysis] (Jul 23)		<ref name="peckshieldmedium-2070">[https://peckshield.medium.com/xwin-finance-incident-root-cause-analysis-71d0820e6bc1 Xwin Finance Incident Root Cause Analysis] (Jul 24, 2021)</ref>

	[https://xwin.medium.com/summary-of-the-misuse-of-flash-loan-against-xwin-protocol-a04f7719a0ee Summary Of The Misuse Of Flash Loan Against Xwin Protocol] (Jul 23)		<ref name="xwinmedium-2071">[https://xwin.medium.com/summary-of-the-misuse-of-flash-loan-against-xwin-protocol-a04f7719a0ee Summary Of The Misuse Of Flash Loan Against Xwin Protocol] (Jul 24, 2021)</ref>

	[https://dappradar.com/binance-smart-chain/defi/xwin-finance xWIN Finance \| DappRadar] (~~Jul 31~~)		<ref name="dappradar-2072">[https://dappradar.com/binance-smart-chain/defi/xwin-finance xWIN Finance \| DappRadar] (Aug 1, 2021)</ref>

	[https://www.reddit.com/r/CryptoMoonShots/comments/ltdnfi/xwin_xwinfinance_bsc_low_mc_gem/ $xWIN xwin.finance (#BSC) Low mc gem! : CryptoMoonShots] (~~Jul 31~~)		<ref name="reddit-2073">[https://www.reddit.com/r/CryptoMoonShots/comments/ltdnfi/xwin_xwinfinance_bsc_low_mc_gem/ $xWIN xwin.finance (#BSC) Low mc gem! : CryptoMoonShots] (Aug 1, 2021)</ref>

	[https://xwinglobal.medium.com/about About – xwin.finance – Medium] (~~Jul 31~~)		<ref name="xwinglobalmedium-2074">[https://xwinglobal.medium.com/about About – xwin.finance – Medium] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1408232268221485057 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2075">[https://twitter.com/xwinfinance/status/1408232268221485057 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1408312118718304256 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2076">[https://twitter.com/xwinfinance/status/1408312118718304256 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1408348970858942473 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2077">[https://twitter.com/xwinfinance/status/1408348970858942473 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1408410593111932931 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2078">[https://twitter.com/xwinfinance/status/1408410593111932931 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1408641503501570049 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2079">[https://twitter.com/xwinfinance/status/1408641503501570049 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1408773114293460992 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2080">[https://twitter.com/xwinfinance/status/1408773114293460992 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://www.youtube.com/watch?v=TPelODANEZU フラッシュローンの攻撃の分析結果とxWINの今後について① Analysis results of flash loan attacks and future of xWIN ① - YouTube] (~~Jul 31~~)		<ref name="youtube-2081">[https://www.youtube.com/watch?v=TPelODANEZU フラッシュローンの攻撃の分析結果とxWINの今後について① Analysis results of flash loan attacks and future of xWIN ① - YouTube] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1408969812814950402 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2082">[https://twitter.com/xwinfinance/status/1408969812814950402 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1409123054983122946 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2083">[https://twitter.com/xwinfinance/status/1409123054983122946 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1409125754294521857 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2084">[https://twitter.com/xwinfinance/status/1409125754294521857 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1409292454189101060 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2085">[https://twitter.com/xwinfinance/status/1409292454189101060 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1410182588572995586 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2086">[https://twitter.com/xwinfinance/status/1410182588572995586 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://twitter.com/xwinfinance/status/1410781475503366155 @xwinfinance Twitter] (~~Jul 31~~)		<ref name="xwinfinancetwitter-2087">[https://twitter.com/xwinfinance/status/1410781475503366155 @xwinfinance Twitter] (Aug 1, 2021)</ref>

	[https://www.youtube.com/watch?v=2nz-o00a8AI フラッシュローンの攻撃の分析結果とxWINの今後について② Analysis results of flash loan attacks and future of xWIN ② - YouTube] (~~Jul 31~~)		<ref name="youtube-2088">[https://www.youtube.com/watch?v=2nz-o00a8AI フラッシュローンの攻撃の分析結果とxWINの今後について② Analysis results of flash loan attacks and future of xWIN ② - YouTube] (Aug 1, 2021)</ref>

	[https://xwin.medium.com/details-of-compensation-to-fans-and-users-and-future-actions-of-xwin-c8f2ea4b76d0 Details Of Compensation To Fans And Users And Future Actions Of Xwin] (~~Jul 31~~)		<ref name="xwinmedium-2089">[https://xwin.medium.com/details-of-compensation-to-fans-and-users-and-future-actions-of-xwin-c8f2ea4b76d0 Details Of Compensation To Fans And Users And Future Actions Of Xwin] (Aug 1, 2021)</ref>

	[https://www.youtube.com/watch?v=ifnLt-aynLI Compensation Program Explanation 2021.06.29 - YouTube] (~~Jul 31~~)		<ref name="youtube-2090">[https://www.youtube.com/watch?v=ifnLt-aynLI Compensation Program Explanation 2021.06.29 - YouTube] (Aug 1, 2021)</ref>

	[https://xwin.medium.com/official-announcement-from-the-xwin-community-1ff31817c261 Official Announcement From The Xwin Community] (~~Jul 31~~)		<ref name="xwinmedium-2091">[https://xwin.medium.com/official-announcement-from-the-xwin-community-1ff31817c261 Official Announcement From The Xwin Community] (Aug 1, 2021)</ref>

	[https://xwin.medium.com/details-of-compensation-program-36a3e90d13cd Details Of Compensation Program] (~~Jul 31~~)		<ref name="xwinmedium-2092">[https://xwin.medium.com/details-of-compensation-program-36a3e90d13cd Details Of Compensation Program] (Aug 1, 2021)</ref>

	[https://xwin.medium.com/notice-from-xwin-community-8849305db57f Notice From Xwin Community] (~~Jul 31~~)		<ref name="xwinmedium-2093">[https://xwin.medium.com/notice-from-xwin-community-8849305db57f Notice From Xwin Community] (Aug 1, 2021)</ref>

	[https://docs.xwin.finance/ xWIN Finance Intro - xWin Docs] (~~Jul 31~~)		<ref name="xwindocs-2094">[https://docs.xwin.finance/ xWIN Finance Intro - xWin Docs] (Aug 1, 2021)</ref>

	[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 10)		<ref name="openblocksecgithub-2342">[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 11, 2021)</ref></references>