According to Wu, Yu Xian, the founder of Slow Mist, stated that starting from 2:48 AM today, the attackers related to DEXX have begun to successively exchange tokens on a batch of EVM (ETH/BASE/BSC) addresses for corresponding ETH/BNB. The exchange is still ongoing, and these ETH/BNB have not yet been transferred out (although related tests have been discovered).