The platform explained exactly how the hacker turned “frozen” deposits into live money.
Old tools in the cryptosphere for years can remain forgotten for years until one vulnerability turns them into a source of major losses. This happened with the DxSale, a platform for launching me makers: about $ 7.3 million was withdrawn from the old liquidity storage facilities on BNB Chain. According to the PeckShield service, the attack affected approximately 1 400 liquidity providers. The address of the attacker 0xC457 transferred BNB in the amount of $ 1.87 million to two main wallets, and then distributed funds to several deposit addresses of Binance.
DxSale was actively used back in 2021 to block the liquidity of tokens launched on BNB Chain. The analyst of the blockchain Tahax believes that in the old repository there are still funds of projects created a few years ago. According to him, the wallet of the attacker appeared shortly before the attack and received funds through the cryptocurrency exchange Bybit.
Later, some of the stolen assets were carried out through infrastructure that could make it difficult to spy. Tahax also said that 269 days ago, the owner of the contract DxSale imperceptibly transferred the management of new addresses, and the transfer was not publicly announced. After that, according to him, followed by dozens of transactions with the change of ownership, until the control was at the wallet that began the mass withdrawal of the BNB.
The Coinsult platform linked the attack to a combination of the privileged function of changing the commission and the old blocking of funds. Such a bundle, according to her, made it possible to turn “blocked” deposits into a balance available for withdrawal. DxSale said the problem concerned only the storage of the first version, launched in 2021. The platform’s team explained the incident with a new feature of atomic transactions in the BSC and assured that the storage of the second version and newer contracts were not affected.
The incident has heightened the alarm around decentralized finance. According to DefiLlama, in May, hackers have already stole $ 59 million from such services. In April, the amount of losses reached $ 634 million, which was a maximum of more than a year.
Old tools in the cryptosphere for years can remain forgotten for years until one vulnerability turns them into a source of major losses. This happened with the DxSale, a platform for launching me makers: about $ 7.3 million was withdrawn from the old liquidity storage facilities on BNB Chain. According to the PeckShield service, the attack affected approximately 1 400 liquidity providers. The address of the attacker 0xC457 transferred BNB in the amount of $ 1.87 million to two main wallets, and then distributed funds to several deposit addresses of Binance.
DxSale was actively used back in 2021 to block the liquidity of tokens launched on BNB Chain. The analyst of the blockchain Tahax believes that in the old repository there are still funds of projects created a few years ago. According to him, the wallet of the attacker appeared shortly before the attack and received funds through the cryptocurrency exchange Bybit.
Later, some of the stolen assets were carried out through infrastructure that could make it difficult to spy. Tahax also said that 269 days ago, the owner of the contract DxSale imperceptibly transferred the management of new addresses, and the transfer was not publicly announced. After that, according to him, followed by dozens of transactions with the change of ownership, until the control was at the wallet that began the mass withdrawal of the BNB.
The Coinsult platform linked the attack to a combination of the privileged function of changing the commission and the old blocking of funds. Such a bundle, according to her, made it possible to turn “blocked” deposits into a balance available for withdrawal. DxSale said the problem concerned only the storage of the first version, launched in 2021. The platform’s team explained the incident with a new feature of atomic transactions in the BSC and assured that the storage of the second version and newer contracts were not affected.
The incident has heightened the alarm around decentralized finance. According to DefiLlama, in May, hackers have already stole $ 59 million from such services. In April, the amount of losses reached $ 634 million, which was a maximum of more than a year.
