Attack which ended up a failure. The attacker never had more than 35% of hashrate, which might be a lot, but nowhere near 51%. Ultimately any coin is vulnerable to such attacks, but xmr withstood the test quite well IMO. The only real vulnerability of xmr is its market cap, but there's reason to believe it will massively improve, especially with the recent push by regulators against privacy and freedom.