DxSale allegedly drained $7.3M from 1,400 BNB Chain liquidity providers through a silent locker handoff.
Security & Exploits ·
Tahax reported that DxSale drained approximately $7.3 million from liquidity providers on BNB Chain through a coordinated exploit involving a silent transfer of locker ownership. DxSale operated the largest liquidity locker of 2021, holding hundreds of millions in locked tokens from projects including SAFEMOON, which had served as a trust mechanism for retail investors launching tokens on the network since 2021.
The attack unfolded over months without public announcement. The DxSale deployer transferred locker ownership to a new wallet 269 days before the report, leaving the unverified contract with an exploitable backdoor intact. Ownership then cycled through multiple fresh wallets designed to obscure the chain of custody while preserving admin rights, finally settling at a newly created, empty wallet funded from Bybit. Within hours of this final transfer, the draining began across more than 1,400 liquidity pools.
The extracted funds were routed through what appears to be AnySwapBot to render them untraceable across chains, with final destinations and recipient wallets remaining unknown at the time of reporting. Additional pools were being drained as the report circulated, and the total loss from BNB Chain LPs alone reached approximately $7.3 million, though the full scope across other chains had not been established.