DEXX (2024) — Crypto Hack
Funds LaunderedDEXX, a Solana-based memecoin trading bot, was drained of user funds after attackers compromised the platform's private key management, with users reporting losses exceeding $1B.
Summary
DEXX, a Solana-based memecoin trading bot, was drained of user funds after attackers compromised the platform's private key management, with users reporting losses exceeding $1B.
How It Was Compromised — Memecoin Trading Bot via Private Key Compromise
On November 12, 2024, DEXX, a Solana-based memecoin trading bot, was exploited with users reporting losses exceeding $1B. The attack was attributed to a compromise of the platform's private key management system, which allowed the attacker to drain user wallets that had granted the platform approval to execute trades on their behalf. Unlike a typical smart contract exploit, this attack targeted the platform's off-chain infrastructure and the custody model that required users to import their private keys or grant the platform spending approvals. The exact total loss was disputed, with on-chain analysis suggesting the realized loss may have been lower than the $1B claimed by affected users, but the incident remains one of the largest reported losses of 2024.
Fund Flow & Laundering Analysis
Stolen SOL and SPL tokens were swapped to other assets via decentralized exchanges on Solana. The funds were then moved through multiple intermediary wallets and bridged to other chains via cross-chain bridges. The attacker used a complex network of intermediary wallets to fragment the laundering trail. DEXX suspended operations and engaged with blockchain analytics firms and law enforcement. No recovery has been reported at the time of writing.