Meme token trading platform DEXX has been at the center of a major security breach that has left users with significant losses. According to reports, users have lost $16.79 million due to unauthorized token transfers. The biggest losers were holders of meme assets BAN and LUCE, who lost $3.45 million and $1.75 million, respectively.
The DEXX development team acknowledged the issue and said it had brought in several security auditors to identify and fix the platform vulnerability.
Leading blockchain security auditor CertiK also confirmed that it had received requests for help from affected users. The investigation revealed that the main problem was improper management of private keys, which led to the disclosure of the official DEXX private key. CertiK experts reported that the hacked system is located on the Solana blockchain, which the company’s experts had not previously verified.
Hardware wallet provider OneKey has suggested that DEXX may have accidentally downloaded the contents of users' clipboards, potentially exposing sensitive information.
The incident sent shockwaves through the crypto community, with many questioning the platform’s security protocols and the role of third-party auditors. DEXX’s claim that the platform had been audited drew criticism, especially given that the hack revealed clear vulnerabilities in private key management.