ALERT! Our system detected a suspicious transaction targeting @x100global on Ethereum, resulting in an estimated loss of $4.75M. The root cause stems from a governance design flaw that allowed the attacker to acquire two of three Senate seats using flash-loan-funded X tokens and immediately approve and execute a malicious treasury proposal within the same transaction. The attacker purchased X tokens using flash-loaned funds, distributed them to two controlled contracts, and froze them in the Freezer to obtain Senate seats. The attacker then created and supplied liquidity to a PancakeSwap V3 X-USDT pool. Using the captured majority, the attacker executed a proposal directing the Freezer to swap 400,000 X tokens into that pool with the minimum output set to zero, receiving only about 35.68 USDT. Finally, the attacker withdrew the liquidity, sold part of the recovered X tokens through the existing Uniswap V3 X-USDT pool, and repaid the flash loan. Attack TX: app.blocksec.com/phalcon/exp…