Safety

Polkadot Treasury Lost $1.38 Million Due to Missed XCM Patch

November 4, 2026, 3:11 PM UTC (2 hours ago) · 1 source · Summarized by CryptoBipto

The Polkadot treasury reportedly lost $1.38 million after a patch for its cross-consensus messaging (XCM) system failed to make it into production. The incident highlights a gap in the deployment process that allowed a known vulnerability to remain unpatched.

WHY IT MATTERS

Think of this like a building manager who knows a lock is broken and has a new lock ready but never installs it — and then someone walks in and takes money from the safe.

Read the full analysis with a CryptoBipto membership

Members read why every story matters and the full analysis behind it.

Join CryptoBipto Member sign-in

SOURCES

thedefiant.io

DOTPolkadotXCMTreasurySmart Contract VulnerabilityDeployment Failure

Learn the concepts behind this

Clear explanations of the subjects this article touches, with every term defined.

What is cryptocurrency, and how does it work?A simple explanation of cryptocurrency, blockchains, coins, tokens, mining and staking, with a definition page for every term used.