XDKRecycle exploit analysis
XDKRecycle's recycle reward was amplifiable via a pre-incremented per-block counter, letting the attacker claim both the reward and the recycled balance. DeFiHackLabs reconstructs the drain.
- Reported loss
- 6.84 WBNB, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-02-16: Xdk Recycle Reserve Manipulation on XDKRecycle”.
Analysis1 min read
XDKRecycle's recycle reward credited the caller with a tier proportion of the recycled supply but debited the recycled supply from a per-block counter that the attacker had pre-incremented in the same block. The mismatch let the caller claim both the recycling bonus and the recycled balance.
DeFiHackLabs reconstructs the sequence against the live state; total loss is captured in the PoC.
What would have prevented it: a single atomic recycle credit and counter debit.
Other exploits
- AlkemiEarn exploit analysis 10 Mar 2026
- Curve LlamaLend exploit analysis 2 Mar 2026
- LAXO Token exploit analysis 22 Feb 2026
- Moonwell February 2026 exploit analysis 15 Feb 2026
- Makina exploit analysis 20 Jan 2026
- SynapLogic exploit analysis 20 Jan 2026
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
