Alex Lab: Some of the stolen funds have been recovered and continue to be tracked, and mitigation measures for affected community members are being considered

On May 16, DeFi tool Alex Lab released an update on the attack incident. Regarding the affected assets, the attacker carried out a targeted attack to take over the administrator rights of a vault associated with the ALEX liquidity pool, affecting all assets in the vault, including about 13.70 million STX, of which about 3 million were sent to various CEX, and the amount is still increasing, while the balance is retained in several wallets. So far, all aBTC, sUSDT, xBTC, xUSD, ALEX, atALEX, LiSTX, LUNR, SKO, CHAX, B20, ORDG, ORMM, ORNJ, TRIO, TX20 and STXS have been restored. ALEX's smart contract code and infrastructure were not compromised.
Regarding monitoring and operations, the wallets of the attackers are being closely monitored and all relevant CEXs have been notified. All known CEX accounts associated with the attackers have been frozen. In addition, all these exchanges have been asked to stop all deposit and withdrawal functions until further notice. Regarding fund recovery, a portion of the stolen funds have been identified and are being recovered from one CEX. It is actively working with other CEXs to go through the necessary processes to facilitate the return of more funds. Regarding legal measures, in order to further recover the stolen funds, we are ready to file a police report. If the attackers do not cooperate with us in a timely manner, they will receive police support to assist in the fund recovery efforts. In order to further monitor the actions of the attackers and prevent any further transfer of funds, current forensic data is being shared with all relevant CEXs.