Over 1,400 Liquidity Providers Hit in $7.3 Million DxSale Exploit

Over 1,400 Liquidity Providers Hit in $7.3 Million DxSale Exploit

A security breach on May 29th resulted in the loss of $7.3 million worth of funds from over 1,400 liquidity pools on the BNB Chain. The issue stemmed from vulnerabilities in older contracts used by DxSale, as identified by blockchain security experts.

This hack is the latest in a recent surge of security problems in the DeFi world. Experts say older smart contracts and easily compromised access systems are making these platforms vulnerable.

What Happened

Security firm PeckShieldAlert reports that a user named “Tahax” was the first to discover an attack targeting older liquidity pool contracts on BNB Chain. Attackers drained approximately $7.3 million in cryptocurrency from at least 1,400 of these contracts and then used AnySwap to try and hide the transactions.

According to PeckShield, the hacker transferred $1.87 million worth of BNB (2,958 BNB) from the recent hack to two main digital wallets. These wallets then sent the funds through multiple deposit addresses on the Binance exchange.

DxSale is a platform that helps new cryptocurrency projects launch their tokens and create trading pools without needing to build everything from scratch. It was particularly popular around five years ago, and many projects launching on the BNB Chain used it to secure their initial trading funds.

Tahax reports that the locker still contained old project records, and people thought their funds were secure. However, about nine months ago, the person who created the locker secretly transferred ownership to a new, unknown account without telling anyone. A crypto investigator believes the locker’s code wasn’t publicly checked, likely contained a hidden vulnerability, and that’s how the attacker was able to steal the funds.

Just two days ago, a newly created digital wallet – address 0xC457…FA69 – acquired control of a certain system and quickly began withdrawing funds from it. This wallet was likely funded through the Bybit exchange and may have used the AnySwap platform to transfer the funds.

DxSale itself was yet to make a statement regarding the exploit.

DeFi Security Concerns Keep Growing

The recent DxSale hack is part of a larger trend of attacks in the crypto world, with at least $650 million lost in April alone. May has also seen numerous attacks, including a recent incident where someone stole over $11 million from the Verus bridge. This happened because the attacker found a weakness in how the bridge confirmed payment amounts. They sent a small transaction that appeared legitimate, but allowed them to withdraw a large sum of money from the bridge’s funds.

Earlier this month, TrustedVolumes, a liquidity provider, lost around $5.9 million due to a hack. The hacker took advantage of a flaw in how the system processed transactions. Experts noted that the problem occurred because the system verified approvals using one digital address, but actually moved funds from a different one.

THORChain also suffered losses, potentially exceeding $10 million, according to on-chain investigator ZachXBT. This news caused the price of its RUNE token to drop sharply by 15% in just a few minutes.

The constant flow of security breaches has prompted a strong response, with OpenZeppelin co-founder Manuel Aráoz stating that all of decentralized finance (DeFi) is currently vulnerable. He believes attackers using artificial intelligence are discovering weaknesses more quickly than security experts can fix them.

Read More

2026-05-30 15:45