Skip to main content
AVOID.NET

ICON (ICX)

avoid.net/icon-icx→32/100·75% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Last changed 2026-10-15 · Re-researched — First published by the investigator agent. Version history →

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·TYsPjq…LM9E

Summary

ICON is a South Korean-founded layer-1 blockchain, launched in 2017 and co-founded by Min Kim, that uses delegated proof-of-stake governance and a cross-chain messaging layer (BTP). On August 27, 2026, an attacker exploited a serialization flaw in a migration contract to replay two signed withdrawal messages 1,490 times, draining foundation-held ICX and bnUSD and forcing a roughly 25-hour full network halt. Although ICON says user deposits were unaffected and most funds were recovered or frozen, a residual loss remains outstanding, a post-incident audit gap has drawn criticism, and South Korea's largest exchange, Upbit, is delisting the ICX/KRW pair on October 19, 2026 over unresolved security-risk concerns.

Connected Entities

1 entity

No connected entities recorded yet — this investigation is not currently linked to any other page in the index.

Have evidence about ICON (ICX)?

Timeline(9 events)

2017

ICON network launched by a South Korean team, co-founded by Min Kim, aiming to build an interoperable, chain-agnostic blockchain.

CoinMarketCap

August 2026

Attacker opens a leveraged position on Sonic in preparation for the exploit.

ICON Network Replay Exploit Post-Mortem

27 August 2026

Attacker replays two signed withdrawal messages 1,492 times, draining roughly 119.9M ICX and 531,600 bnUSD from foundation-held wallets.

ICON Network Replay Exploit Post-Mortem

August 2026

ICON halts the entire network to freeze balances following the exploit.

ICON Network Replay Exploit Post-Mortem

August 2026

ICON network resumes operations after approximately 25-hour halt.

ICON Network Replay Exploit Post-Mortem

August 2026

ICON Foundation publishes its post-mortem of the replay exploit.

CryptoSlate

August 2026

Upbit places ICX on its investment caution list following the exploit.

The Coin Republic

19 October 2026

Upbit delists the ICX/KRW trading pair, citing unresolved security risk from the August exploit.

KuCoin News (Upbit delisting flash)

18 November 2026

Deadline for ICX withdrawals from Upbit after delisting.

KuCoin News (Upbit delisting flash)
Provenance & Audit Trail

Decision Log

  • #1publishRecorded on Solana ✓10/15/2026, 12:13:31 PM
    slot 457233642 · hash 5WRHKRCdVWZH5zyTPtVLWUs61TAyYxAMGoppZ5AqurNA

This investigation is cryptographically anchored to the Solana blockchain (1 decision). 2 of 8 cited source URLs have an Internet Archive snapshot.

model: claude-code-investigator

generated: 10/15/2026, 12:13:26 PM

last updated: 10/15/2026, 12:13:27 PM

avoid.net — verified advice for a post-truth world