DxSale Launchpad Hacked for $7.3M via Old BNB Contract

3 Min Read Tags:

  • Approximately 1,400 liquidity providers on the BNB Chain were affected by a significant cyber attack.
  • Hackers exploited an undisclosed backdoor in the liquidity lock contract, leading to substantial financial losses.
  • The DxSale launchpad suffered a loss of around $7.3 million due to this breach.
  • Stolen funds were partially transferred through centralized exchanges, complicating traceability efforts.

Understanding the DxSale Breach

In a significant blow to the cryptocurrency community, the launchpad DxSale was compromised, resulting in losses amounting to approximately $7.3 million. This incident involved an attack on liquidity providers within the BNB Chain network. According to analytics firm PeckShield, hackers managed to withdraw assets from liquidity lock contracts.
The attackers moved some of the stolen funds to addresses associated with centralized exchanges like Binance. This maneuver poses challenges for tracking and recovering these assets.

A Hidden Vulnerability Exploited

According to expert analysis by Tahax, the breach stemmed from vulnerabilities within DxSale’s infrastructure. In 2021, projects launching tokens on BNB Chain locked their liquidity with DxSale as a trust measure. These storage facilities still held assets from old projects that became targets for this attack.
Interestingly, experts noted that ownership of the contract was transferred to a new address 269 days before this incident without public notification. This transfer and subsequent ownership changes likely obscured preparations for the breach.

The Attack Mechanism Unveiled

Research by Coinsult revealed that attackers utilized a combination of backdoor access and privileged contract functions. This mechanism transformed previously locked deposits into accessible funds for withdrawal.
By employing sophisticated tactics such as routing transactions through multiple wallets and centralized exchanges like Bybit, hackers effectively complicated tracing efforts. Such methods underline ongoing security issues within decentralized finance (DeFi).

Implications for DeFi Security

This incident highlights persistent security challenges in the DeFi sector. In May alone, crypto-related breaches resulted in losses exceeding $52 million, underscoring vulnerabilities within digital asset protocols.
Cumulatively, attacks on cryptocurrency platforms have surpassed $17 billion in damages. Of these losses, approximately $7.8 billion are attributed specifically to DeFi protocol breaches.
Overall, these events emphasize the necessity for enhanced security measures and vigilant monitoring across blockchain networks to safeguard digital assets against future threats.

TAGGED:
Bitcoin Hits $79,500 Target as Ethereum Faces Pressure Before Fed Meeting

An unnamed trader said a Bitcoin short reached its final $79,500 target, while an October close below $80,000 could open a decline toward $72,500 and $70,000.

6 Min Read
Bank of Israel Criticizes Netanyahu’s Plan to Bypass Sanctions With Cryptocurrencies

Israel’s central bank and opposition politicians criticized Prime Minister Benjamin Netanyahu’s proposal to develop an alternative economic system, potentially using cryptocurrencies, to avoid possible banking sanctions.

3 Min Read
Hong Kong Approves 24/7 Trading of Tokenized Investment Funds

Hong Kong’s SFC approved the world’s first secondary trading of tokenized public investment funds on a licensed virtual asset platform, where PantherTrade began trading two ChinaAMC funds on October 15,…

3 Min Read
BNB Chain Plans New Layer 1 Network Launch in Early 2027

BNB Chain plans a separate high-performance Layer 1 network complementing BNB Smart Chain, using BNB for fees, staking and governance, with a public testnet targeted by end-2026 and mainnet in…

3 Min Read
GMO Internet Hackers Gain Access to Clients’ Trading Accounts

Investigating from October 19, GMO Internet confirmed unauthorized Onamae.com Desktop Cloud access potentially affecting 26,739 servers, possible MetaTrader credential theft and reported unauthorized trades, pledging confirmed-loss reimbursements and 5,000-yen active-user…

4 Min Read