In 2017, Stellar's blockchain network experienced a significant security breach when attackers exploited a vulnerability in its smart contract implementation. This critical incident resulted in the illicit creation of approximately 2.25 billion XLM tokens, valued at around $10 million at the time. The exploit targeted a concurrency bug in the Stellar protocol that allowed for unauthorized token generation, representing nearly 25% of the circulating supply in April 2017.
The Stellar Foundation responded swiftly to this security threat by patching the vulnerability and subsequently burning all the fraudulently created tokens to maintain the integrity of XLM's tokenomics. This incident demonstrates the substantial risks associated with smart contract implementations, even on established blockchain networks.
| Aspect of the Exploit | Details |
|---|---|
| Tokens Created | 2.25 billion XLM |
| Value at Time | $10 million |
| Percentage of Supply | ~25% of circulating supply |
| Vulnerability Type | Concurrency bug in protocol |
| Resolution | Bug patched, tokens burned |
This incident serves as a historical reminder of the critical importance of thorough security auditing for blockchain protocols. Despite the significant impact, Stellar's response helped restore confidence in the network, allowing it to eventually recover and continue development. The project has since strengthened its security practices and continues to operate as one of the top 20 cryptocurrencies by market capitalization, currently valued at approximately $10.5 billion.
In January 2018, the cryptocurrency world witnessed a significant security breach when hackers orchestrated a DNS hijacking attack against Blackwallet, a web wallet service for Stellar Lumen (XLM). The attackers successfully stole approximately 669,920 Lumens, valued at around $400,192 at the time based on XLM's exchange rate.
The incident highlighted critical vulnerabilities in web-based cryptocurrency storage systems. The hackers employed a sophisticated DNS hijacking technique, redirecting users from the legitimate BlackWallet website to a malicious clone that captured users' credentials.
The theft demonstrated the evolving nature of cryptocurrency security threats, particularly those targeting hosting infrastructure rather than the blockchain itself.
| Attack Details | Value |
|---|---|
| Cryptocurrency | Stellar Lumen (XLM) |
| Amount Stolen | 669,920 XLM |
| Value at Time | ~$400,000 |
| Attack Vector | DNS Hijacking |
| Target | BlackWallet.co |
Following the incident, security experts observed a 40% increase in phishing attacks targeting cryptocurrency users in early 2025, demonstrating the persistent and growing nature of such threats. The BlackWallet hack served as a sobering reminder for cryptocurrency holders about the risks associated with web-based wallets and the importance of utilizing cold storage solutions for significant holdings. While the Stellar network itself remained secure, this incident emphasized that third-party services built on blockchain technology often represent the weakest link in cryptocurrency security.
XLM holders utilizing centralized exchanges face significant custody risks that cannot be overlooked. The primary concern stems from exchanges controlling users' private keys, which directly impacts asset security and ownership rights. When XLM holders deposit their tokens on platforms, they effectively surrender direct custody of their assets.
Recent security incidents have highlighted these vulnerabilities, with the October 2025 flash crash seeing XLM price plummet from $0.37 to $0.16 within 24 hours, causing widespread panic among exchange users unable to access their funds during critical moments.
The custody risk comparison between different storage methods reveals important security differences:
| Storage Method | Private Key Control | Risk Level | Recovery Options |
|---|---|---|---|
| Centralized Exchange | Exchange controls | High | Platform-dependent |
| Self-custody Wallet | User controls | Medium | Seed phrase backup |
| Third-party Custody | Split control | Low-Medium | Multiple authentication |
With XLM's current market cap of $10.55 billion and over 9.9 million holders, the scale of potential exposure is substantial. Centralized exchange dependencies create additional vulnerability during network congestion or service outages, as evidenced during the September 2025 Stellar network upgrade when several exchanges temporarily suspended XLM withdrawals.
For optimal security, XLM investors should consider third-party custody solutions offering enhanced security protocols without sacrificing accessibility, particularly for holdings exceeding 1,000 XLM ($329.59 at current prices).
Yes, XLM has a promising future. Its role in cross-border transactions and partnerships with financial institutions positions it for potential growth and increased adoption by 2025.
XLM has real-world applications and growing adoption. It may be a good long-term investment for those interested in blockchain payments. Current market trends suggest potential growth.
XLM reaching $10 is unlikely in the near future. It would require massive adoption and market growth, which is not currently projected for XLM.
XLM is projected to reach $5 by 2027, based on bullish trends and token supply limitations.
Share
Content