medium
Data leak
Reported partner-API exposure of metadata for about 355,000 swaps
According to a third-party project profile and the kycnot.me event log, security research published in mid-2026 found that Exolix partner-API keys were unscoped and lacked rate limiting, exposing transaction metadata reportedly covering about 355,000 swaps and $39.5 million in volume between January 2025 and May 2026. No loss of user funds was reported. No public incident report from the company was found during this review.
Outcome unknown Source: solanacompass.com ↗