Incident Overview
On November 16, 2024, trading platform DEXX suffered a private key vulnerability exploit, which has now impacted at least 900 unique users across multiple chains (primarily Solana). Initial reports estimated losses at $21 million, but the total has risen to nearly $30 million due to significant price fluctuations in the stolen meme tokens.
The attacker gained unauthorized access to private keys within DEXX’s system, enabling them to redirect user funds into addresses controlled on Solana and other networks. Many users lost less than $10,000, but at least one address reportedly lost over $1 million. In response, DEXX suspended certain services, published warnings, and offered a reward if the stolen funds were returned.
Despite these measures, no stolen assets have been recovered. Solana wallets, in particular, have come under increased scrutiny for similar incidents this year, raising broader concerns about private key security and driving ongoing investigations by SlowMist, DEXX, and law enforcement agencies.
Incident Report
Protocol Information
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to DEXX, these are the critical security checks that could have prevented this incident (November 2024).
- Verify all logic paths related to Private Key Compromised (Stored Publicly) / Other are guarded by proper access controls and input validation - see the Access Control Attacks attack class for patterns
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialRelated Attack Classes
The technique used in this hack maps to these vulnerability classes in our security curriculum:
Sources & References
- 01
- 02
- 03
- 04
- 05
Learn to Prevent the Next DEXX
The DEXX hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.