A bug in the Zilliqa node lets ZRC2-backed tokens (SEED, zUSDT, ZOGE, stZIL, gZIL, XCAD, zWBTC, ZILPEPE, VOID, STREAM, Lunr, GARY, ZHIB, HRSE, FPS) be spent without leaving the sender, and it has been used to drain pools holding them. Pools with these tokens remain at risk until Zilliqa releases a fix. Do not provide liquidity with these tokens, and take care when trading them.

Around $800k was stolen from X-Bridge. Tokens bridged to Zilliqa through X-Bridge (zUSDC, zUSDT, zWBTC, XCAD) are no longer backed. Do not bridge through X-Bridge, and take care when trading or providing liquidity with these tokens.