DxSale suspected of insider theft, with over $7.3 million in LP drained

According to ChainCatcher, the on-chain security analysis account Eye reported that BNB Chain project launch platform DxSale is suspected of using a hidden backdoor to drain funds from old liquidity pools locked in 2021, involving more than 1,400 LPs and an amount of around $7.3 million. The analysis states that the attack included a "silent ownership transfer," operations across more than 80 wallets, and other maneuvers. After the LPs were drained, the attacker's address received over 1,200 BNB (approximately $763,000), believed to come directly from multiple stolen LP pools. What raises further suspicion is that this address had been dormant for a long period but has a direct on-chain link to a wallet marked as related to the DxSale team, and it is also one of the major fund inflow addresses for the DxSale smart contract.

Subsequently, the attacker’s address transferred about 3,400 BNB (around $1.2 million) to multiple wallets and completed fund transfers through several deposit addresses at an exchange. Eye pointed out that if these allegations are true, it would mean the DxSale team may have reserved a backdoor for the platform years ago and eventually executed the attack themselves. Eye also called on the exchange to freeze the related funds, arguing that these assets essentially belong to the project investors who financed through DxSale. DxSale was once one of the most well-known launchpads and LP lockup infrastructures on BNB Chain, with projects like SAFEMOON having used its services.