Onyx DAO treasury moves 620M XCN as Blockaid flags governance exploit

Onyx DAO treasury moves 620M XCN as Blockaid flags governance exploit

An attacker reportedly used a passed governance proposal to pull roughly $2.91 million in XCN from the Onyx treasury on Ethereum.

A governance vote is supposed to be decentralization at its most civic. On Onyx, it apparently doubled as a withdrawal slip. On October 6, 2026, security firm Blockaid issued a real-time alert flagging an exploit tied to the Onyx DAO treasury contract on Ethereum. The alert centered on a transfer of 620 million XCN, valued at approximately $2.91 million, out of the treasury and into wallets Blockaid