Key Takeaways:
An attacker drained $7.3 million from DxSale's legacy liquidity locker contracts on BNB Chain, affecting roughly 1,400 liquidity providers whose funds had remained locked since the platform's peak usage during the 2021 token launch boom.
"The exploit involved a hidden backdoor in the deployer contract that allowed locked funds to be treated as withdrawable balances," PeckShield, a blockchain security firm, said.
The attacker-controlled address 0xC457 moved about 2,958 BNB, worth roughly $1.87 million, into two primary wallets before routing funds to multiple Binance deposit addresses, according to PeckShield. Blockchain analyst Tahax traced ownership changes across more than 80 transactions over nine months, suggesting the exploit was prepared well in advance. The exploiter wallet was initially funded through crypto exchange Bybit.
The incident adds to a wave of DeFi security breaches that have cost protocols about $52 million in May alone, following $634 million in losses during April — the highest monthly total since February 2025, per DefiLlama data.
Web3 security firm Coinsult linked the exploit to a privileged "setFee" function combined with a backdated lock configuration, which effectively converted locked deposits into withdrawable balances. Community researchers flagged possible insider involvement, citing Telegram discussions from August 2025 where individuals claimed internal access to unlock old DxSale liquidity pools. The DxSale team has not issued an official statement across any of its social channels.
The attack follows a separate exploit at Stake DAO, where an attacker minted more than 5.4 trillion vsdCRV tokens on Arbitrum, and a $5 million loss at Wasabi Protocol after a compromised administrative key allowed contract upgrades across Ethereum, Base, Berachain and Blast. OpenZeppelin co-founder Manuel Aráoz recently warned that AI-assisted vulnerability discovery is making attacks easier to execute, calling "all of DeFi" unsafe.
This article is for informational purposes only and does not constitute investment advice.
