DEXX Hack
REPORTED LOSS
$21.0M
What happened
DEXX users suffered wallet thefts on November 16, 2024. PandaLY's on-chain analysis attributed the incident to private-key leakage and documented SOL and token transfers from affected wallets. Its report did not establish the exact route by which the attacker obtained the keys.
Immunefi's November loss report estimated $21 million.
Technical Root Cause
The key-management failure enabled direct wallet transactions. Server compromise and interception of key exchanges were possibilities raised by the analysis, not proven entry points.
Case & protocol details
Classification
Infrastructure / Key Compromise
Protocol Type
Exploit/Other
Official Website
www.dexx.ai/
Protocol Twitter/X
@DEXXai_EN
How it happened
- Access to user signing keys enabled unauthorized transfers from DEXX-associated wallets.
- The observed transfers used several patterns: token transfers followed by SOL withdrawals, SOL-only withdrawals, and transfers to newly created addresses.
- Some affected wallets received small SOL amounts before additional token transfers, consistent with funding transaction fees.
Evidence & learning
Sources and on-chain records
- report Report x.com
- report DEXX theft incident chain tracking and analysis report panews.io
- report Immunefi Crypto Losses November 2024 Report immunefi.com
- analysis Website reference x.com
- analysis Website reference binance.com
- analysis Website reference bravenewcoin.com
- analysis Website reference cointelegraph.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
