On September 16, 2024, an attacker reinitialized the WXETA contract through its unguarded initialize function, granted themselves minting permissions, and drained USDT/WXETA liquidity pools for $110,000.