DxSale drained for $7.3M in BNB Chain liquidity exploit
DxSale was hit by a BNB Chain exploit that drained about $7.3 million across roughly 1,400 liquidity providers. Onchain analysts say the theft may have used an old locker contract with a hidden control path.
Intelligence analysis by GPT-5.4 Mini
Cointelegraph reports that memecoin launch platform DxSale was drained of about $7.3 million from BNB Chain liquidity providers. Analysts say the exploit may have involved an old locker contract, transferred ownership, and withdrawal logic that let the attacker extract funds and move them through exchange deposit addresses.
DxSale was like a locked box that held money for many crypto projects. A thief found a way to open the box and take about $7.3 million from it.
Some people who study blockchains think the box may have had a secret weak spot left behind from old setup changes. That weak spot may have let the thief pull money out even though it was supposed to stay locked.
It matters because it shows that old crypto code can still cause trouble years later. It is a bit like finding out a house had a hidden spare key nobody remembered.
Analysis
What happened
Cointelegraph says memecoin launch platform DxSale was drained of about $7.3 million in an exploit affecting roughly 1,400 liquidity providers on BNB Chain. PeckShield said the attacker address 0xC457 moved about $1.87 million in BNB into two main wallets and then sent the funds on to multiple Binance deposit addresses.
Why analysts are focused on the locker contract
The article says DxSale was used in 2021 to lock liquidity for BNB Chain token launches, and that the locker still appears to hold assets from older projects. Blockchain analyst Tahax said the exploiter wallet was newly created and funded through Bybit. Tahax also said the deployer quietly transferred ownership of the locker contract 269 days ago and alleged that a backdoor remained in place without any official migration notice.
How the exploit may have worked
According to Coinsult, the issue appears to combine a privileged setFee function with a backdated lock. In the firm’s framing, those controls turned deposits that were supposed to be locked into balances that could be withdrawn. Tahax also pointed to a series of additional ownership hops, which may have been used to obscure control before the final wallet started withdrawing BNB at scale.
Broader context
The report places the incident in a rough month for DeFi security. DefiLlama data cited by Cointelegraph shows about $52 million stolen in May so far, down from $634 million in April. The article also quotes OpenZeppelin founder Manuel Araóz saying he now considers all of DeFi unsafe, pointing to the growing ability of AI to spot contract weaknesses. Cointelegraph says it contacted DxSale for comment.
Key points
- About $7.3 million was drained from DxSale on BNB Chain.
- Roughly 1,400 liquidity providers were affected, according to the report.
- PeckShield said the attacker moved BNB into wallets and Binance deposit addresses.
- Analyst Tahax said the locker contract may have kept a backdoor after ownership changes.
- Coinsult said a privileged fee-setting function and a backdated lock may have enabled withdrawals.
