Over 8,600 Solana Wallets Linked to DEXX Exploit, Reports SlowMist
Blockchain security firm SlowMist has revealed that over 8,620 Solana wallets were linked to the recent exploit targeting the decentralised trading platform DEXX. The attack, which occurred on 16 November 2024, led to an estimated $30 million in losses, exposing critical vulnerabilities in DEXX’s key management system.
The Breach and Its Impact
The exploit stemmed from a leaked private key within DEXX’s centralised custody framework, enabling hackers to access users’ funds. At least 900 individuals worldwide were affected, with losses ranging from a few hundred dollars to over $1 million. SlowMist disclosed these findings through its MistTrack platform, identifying the compromised wallets and sharing a list of associated addresses to enhance recovery efforts.
Investigations and Recovery
DEXX has launched legal action and is collaborating with law enforcement and SlowMist to recover the stolen assets. In a statement, the platform pledged to reimburse affected users if recovery efforts prove successful. “We are committed to addressing this breach fully and ensuring user losses are minimised,” DEXX stated. However, the volatile nature of crypto prices has complicated damage assessment.
We’ve published a list of DEXX attacker addresses, with 8,612 addresses identified on the Solana blockchain so far. This list will be synced across the entire network soon. If you spot any mistakes or missing addresses, let us know—we appreciate your feedback!
The DEXX breach is among November 2024’s largest crypto exploits, alongside a $25.5 million incident involving Thala Labs. These breaches underscore the systemic risks of inadequate decentralised finance (DeFi) security, particularly for platforms reliant on centralised key storage systems.
Conclusion
The DEXX exploit serves as a stark reminder of the importance of robust security measures in crypto trading. With recovery efforts ongoing and new wallet vulnerabilities being investigated, the incident highlights the urgent need for industry-wide improvements to safeguard user assets.
