https://www.halborn.com/blog/post/explained-the-xtoken-hack-august-2021