According to PANews on November 29, Yu Xian, the founder of SlowMist Technology, posted on the X (formerly Twitter) platform that the DEXX attackers have converted various tokens on a batch of Solana addresses into SOL, and these funds have not yet been transferred out.
At the same time, the attacker's addresses on EVM chains such as Ethereum, BSC and Base have begun to show abnormal movement tests, but large-scale fund transfers have not yet occurred.