XOCIETY Addresses $XO Airdrop Incident

XOCIETY’s Founder and CEO, known as OldGinger, has issued an official message to the project’s community following a technical failure during the $XO airdrop claim event. The claim process, which began on June 26, 2025, at 18:00 KST, experienced an unexpected disruption shortly after launch. Approximately 5% of claims were processed before issues began affecting the rest of the participants. The situation escalated as the platform’s servers received over 300 requests per second, which was later suspected to be caused by automated scripts, leading to what resembled a DDoS-style attack.

In response, XOCIETY’s team quickly identified that the issue was connected to a single gas coin object becoming overloaded. Efforts to mitigate the problem included the implementation of filtering logic and a restart of the API server. However, the volume of incoming requests continued, and the service was suspended later that night. To prevent further disruption, XOCIETY transitioned from the automated claim system to direct manual distribution of tokens.

Analysis of the Root Cause

In his message, OldGinger acknowledged both operational and technical factors that contributed to the problem. On the operational side, the team had reduced the claim window from 24 hours to 2 hours based on requests from centralized exchange partners who aimed to avoid early price discovery on decentralized exchanges. This shortening of the window led to a surge in user activity that had not been properly anticipated, including a significant number of automated claim attempts.

From a technical standpoint, the team was not adequately prepared for scenarios involving locked objects on the Sui blockchain, nor had they implemented sufficient defenses against rapid, repeated API calls. This combination of high demand and lack of protective mechanisms caused the system to lock out access to the gas coin object for an extended period of eight hours. As a result, claim attempts by legitimate users failed during this time.

XOCIETY Addresses $XO Airdrop Incident

Planned Improvements to Technical Infrastructure

To address the vulnerabilities exposed during the airdrop, XOCIETY plans to introduce several enhancements to its technical infrastructure. These include the implementation of API rate limiting and protections against DDoS-style behavior, improvements to the system’s ability to handle locked object scenarios, and the deployment of more advanced load testing and demand simulations. The team is also working on restructuring its backend architecture to increase overall resilience and better manage peak activity periods in the future.

XOCIETY

Community Compensation and Next Steps

In recognition of the disruption and the impact it had on users, XOCIETY is preparing a compensation plan for those who were unable to complete their claims during the scheduled window. This plan will involve updates to the quantity of airdropped tokens and potential revisions to the vesting structure. Full details of the proposal will be announced during the upcoming Town Hall on July 1. The team emphasized that any adjustments will remain within the bounds of the existing tokenomics allocation.

OldGinger concluded his message by thanking community members who continued to support the team during the incident. He stated that the goal now is to move forward by implementing necessary changes, restoring trust, and continuing to build the XOCIETY platform within the broader web3 ecosystem. He acknowledged the seriousness of the disruption while reaffirming the team’s commitment to transparency and long-term value creation.