According to a post-incident report released by Parity Technologies on November 2nd, from October 24th to 26th, attackers exploited an XCM vulnerability in Polkadot Asset Hub, causing a discrepancy between the recorded supply of dotUSD and the actual account balance. This distorted the pricing of the DOT/dotUSD liquidity pool, resulting in a loss of approximately $1.381 million to the Polkadot treasury. Parity stated that the vulnerability was reported and patched as early as June of this year, but it could not be deployed to the affected production environment due to missing the release deadline. https://www.(wublock123.com)/news/parity-postmortem-polkadot-treasury-1-38m-breach-fix-not-deployed-71368