shield Other

XCarnival Unclassified Exploit, June 2022 — attack surface walkthrough

On June 2022, XCarnival suffered a other — the first of 188 documented other incidents in our archive where the loss figure was not publicly disclosed but the exploit pattern is documented below.

Attack Mechanics: How the XCarnival Other Played Out

Exploit Class Applied to XCarnival

The XCarnival incident on June 26, 2022 is classified as a Other. A specific exploit class outside the most common buckets. In the full archive, XCarnival is 1 of 188 documented other incidents.

XCarnival in Context

The XCarnival incident joins a class whose largest loss to date is MIMSpell (2024) at $65M.

Prior Other Before XCarnival

The nearest other incident before XCarnival was SNOOD, 8 days earlier on June 18, 2022. The same exploit class surfaced again within the other attack surface.

XCarnival Vulnerability Signature

The primary source categorises the XCarnival exploit specifically as “Infinite Number of Loans”. This narrower label is entity-specific: it reflects how the XCarnival contract failed, rather than the broad other pattern alone.

Impact & Recovery for XCarnival

XCarnival Loss Figure

The loss figure for XCarnival is not publicly disclosed. The primary source reports the exploit in non-USD terms, so no USD estimate is published here. For reference, the average loss across 188 other incidents in our archive is $2.03M.

Timeline Since the XCarnival Incident

The XCarnival exploit occurred 3.8 years ago (1,388 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for XCarnival

Public post-mortem / on-chain analysis for the XCarnival incident: view source.

FAQ

How much did XCarnival lose?

The XCarnival loss figure is not publicly disclosed. The primary source reports the exploit in non-USD token terms, so no USD estimate is published here.

When did the XCarnival hack happen?

The XCarnival exploit was recorded on June 26, 2022 — 1,388 days ago.

What type of exploit hit XCarnival?

The XCarnival incident is classified as a Other. A specific exploit class outside the most common buckets.

How common is the Other pattern seen at XCarnival?

Our archive contains 188 documented other incidents. The XCarnival incident is one of them.

How does XCarnival compare to the largest Other attack?

The largest other incident in our archive is MIMSpell (2024) at $65M. The XCarnival loss was not publicly disclosed.

What conclusion is drawn about the influence of underlying technology on cryptocurrency prices?

Fully decentralized cryptocurrencies exhibit unique self-similarity features at any time scale, affecting price dynamics.

What is the new signature algorithm proposed in the document?

The pre-adaptor signature scheme.