XBridge cross-chain bridge built by SaitaChain was exploited on April 24, 2024 on Ethereum and BNB Chain when unprotected listToken and withdrawTokens functions allowed attacker to register as token owner and drain bridge-held assets.

The cross-chain bridge X Bridge has experienced multiple suspicious transactions, which are still ongoing. A suspicious address was recently funded by Tornado Cash on BNBChain, then bridged to ETH, and subsequently deposited 0.15 ETH into 'OwnedUpgradeabilityProxy.' Shortly after, a withdrawal of 482M STC totaling $824K was made from your 'OwnedUpgradeabilityProxy' contract.