XPR Network, a layer 1 blockchain, suffered an exploit in which an attacker used a withdrawal function accepting negative amounts to manipulate internal balances and withdraw real tokens from proton.swaps. The attack initially drained about 1.56 billion XPR, worth roughly $4.03 million, and spread across pools containing XUSDC, XMD, METAL, LOAN and bridged assets. More than $9 million in liquidity was stolen within 11 minutes. After borrowing against stolen stablecoins through the LOAN protocol, the attacker moved another 563 million XPR, bringing the total amount touched to roughly 2.12 billion XPR, or 6.5% of circulating supply. Network producers patched the contract at 21:32 UTC and later seized 1.80 billion XPR from attacker-controlled accounts at 23:26 UTC, placing it under community control. Only 319.5 million XPR reached external venues. XPR fell about 6.5% from near $0.00276 to an intraday low around $0.00242 on the day after September 11, before recovering toward $0.00259. The token remained below the $0.00271 support level, while its RSI fell to 27.47 and turnover approached $4 million. XPR later stabilized near $0.00261-$0.00262 on September 13, leaving the network focused on restoring liquidity and user confidence.