Onyx Treasury Transfers 620 Million XCN Amid Blockaid Exploit Alert

HACK OR EXPLOITOnyx Treasury Transfers 620Million XCN Amid BlockaidExploit Alert45IMPORTANCECLOSED2NEWS MEDIA2PIECESOct 6, 2026 21:33blockboard.net

Onyx DAO moved 620 million XCN from its treasury contract after a migration proposal it had already promoted. Blockaid flagged the move as a governance exploit alert, and the transfer left about 1.89 million XCN in the Ethereum treasury contract. The event centers on a treasury migration process and the risk raised around concentrated voting power in decentralized governance.

What this rests on

Claim by claim, with its source
✓
Onyx Treasury transferred 620 million XCN after a migration proposal it had publicly promoted.
✓
The transfer left about 1.89 million XCN in Onyx’s Ethereum treasury contract.
✓
Blockaid flagged the 620 million XCN treasury move as a governance exploit alert.
✓
The incident highlights vulnerabilities in decentralized governance tied to concentrated voting power.

What it means

Who it affects, what changes and what is still unconfirmed

Each sentence links inside to the piece that supports it.

Onyx’s treasury move affects holders and governance participants who watch the protocol’s treasury and voting process. The transfer and the Blockaid alert make the migration visible to users and the broader sector the same day it happened, with the treasury balance still showing about 1.89 million XCN in the Ethereum contract.

In practice, the transfer shows that the migration proposal was executed and the treasury funds were moved out of the contract. What remains is the same treasury framework around Ethereum storage for the remaining XCN, while the alert adds a governance-security review layer that was not part of the move itself.

Market reaction

XC Onyxcoin it is the asset of the company or protocol in the event from 2 h before to 4 h after the line marks the first headline
published
-1.06 % before publication
-0.27 % after
$0price at publication
11series points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 6 21:32
+4 min
Oct 6 21:36
Crypto Briefing context
Its angle: vulnerabilities, decentralized, concentrated

Other recent incidents

WhenWhat happenedFigure
2 days ago KolanHook (1.279453 ETH) incident no figure in dollars
3 days ago UNCX Network V2 · Incorrect Share Accounting incident $86k
3 days ago Pirate Chain · Transaction validation vulnerability incident $10.7M
4 days ago Gamdom · Hot wallet server compromise incident $4.2M
7 days ago Papertrade · Price manipulation incident $1.3M

4200 incidents stored