Audit log

Every state-changing event for DEXX: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-05-20 03:37:15Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 420,905,964

   sig

   3tpHKUDYutUV…52RaTzaqcopyexplorer ↗

   hash

   93rbMMY91QXu…S8TsKxLPcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (5939 B) ▸

   {"actor":"system:backfill","investigation_id":"d2393658-2e61-48b5-aade-38c8857d81b4","kind":"publish","page_slug":"dexx","published_at":"2026-05-20T03:37:15.178Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"DEXX","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://skynet.certik.com/projects/dexx"},{"credibility":3,"name":"","type":"other","url":"https://www.chaincatcher.com/en/article/2152340"},{"credibility":3,"name":"","type":"other","url":"https://www.coinglass.com/learn/dexx-scandal-en"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://en.theblockbeats.news/news/55791"},{"credibility":3,"name":"","type":"other","url":"https://www.chaincatcher.com/en/article/2152340"},{"credibility":3,"name":"","type":"other","url":"https://www.web3isgoinggreat.com/?id=dexx-losses"},{"credibility":3,"name":"","type":"other","url":"https://www.ellipal.com/blogs/news/dexx-exposed-the-importance-of-true-decentralized-wallets"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://bravenewcoin.com/insights/dexx-hack-investigation-unveils-over-8600-solana-wallet-links-slowmist-report"},{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/solana-dexx-hack-november-2024-suspicious-wallets"},{"credibility":3,"name":"","type":"other","url":"https://blockchain.news/flashnews/dexx-hacker-transfers-4700-eth-to-tornado-cash"},{"credibility":3,"name":"","type":"other","url":"https://www.chaincatcher.com/en/article/2156116"},{"credibility":3,"name":"","type":"other","url":"https://onekey.so/blog/ecosystem/what-does-it-mean-when-dexx-funds-are-all-laundered-through-tornado-cash/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.cryptopolitan.com/8620-solana-wallets-linked-to-the-dexx-hack/"},{"credibility":3,"name":"","type":"other","url":"https://financefeeds.com/8600-solana-addresses-linked-to-dexx-hack-total-losses-rise-to-30m/"},{"credibility":3,"name":"","type":"other","url":"https://www.thecoinrepublic.com/2024/11/30/30m-dexx-hack-linked-to-8600-solana-wallets/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://decrypt.co/306495/lbank-reveals-dexx-compensation-process-and-enhancing-crypto-and-meme-innovation"},{"credibility":3,"name":"","type":"other","url":"https://decrypt.co/305132/lbank-lead-seven-party-coalition-in-15-million-donation-drive-for-dexx-compensation"},{"credibility":3,"name":"","type":"other","url":"https://www.panewslab.com/en/articles/b0qi6kty"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.chaincatcher.com/en/article/2152340"},{"credibility":3,"name":"","type":"other","url":"https://blog.bitrace.io/dexx-incident-inspiration-understanding-crypto-custody-risks/"},{"credibility":3,"name":"","type":"other","url":"https://www.coinglass.com/learn/dexx-scandal-en"},{"credibility":3,"name":"","type":"other","url":"https://skynet.certik.com/projects/dexx"}]}],"sources_used":[],"summary":"DEXX is a Solana-based on-chain memecoin trading terminal that suffered a catastrophic private key compromise on November 16, 2024, resulting in approximately $30 million in user losses across more than 8,600 wallets. Despite marketing itself as non-custodial, DEXX stored user private keys in plaintext on its own servers — a centralization risk that CertiK had flagged as unresolved prior to the breach. A partial compensation initiative led by LBank was announced in early 2025, but full recovery of stolen funds remains unlikely as the attacker laundered substantial ETH through Tornado Cash.","timeline":[{"date":"2024-11-16","event":"DEXX private key breach begins; user assets across 8,600+ Solana wallets start draining in early morning hours","source":""},{"date":"2024-11-16","event":"CertiK confirms breach on Solana blockchain, attributes cause to improper private key management by DEXX platform","source":""},{"date":"2024-11-16","event":"DEXX founder Roy publicly acknowledges incident, asks for time to address the issue","source":""},{"date":"2024-11-16","event":"GoPlus Security warns DEXX victims of secondary phishing scams soliciting private key uploads","source":""},{"date":"2024-11-17","event":"DEXX applies for judicial wallet marking and requests Solana Foundation assistance to freeze hacker addresses","source":""},{"date":"2024-11-28","event":"SlowMist publishes investigation linking 8,612 Solana wallet addresses to attacker; total losses revised to $30 million","source":""},{"date":"2024-12-02","event":"SlowMist reveals EVM chain victim and attacker addresses, expanding scope to 7,205 EVM wallets","source":""},{"date":"2024-12-09","event":"Attacker begins depositing stolen ETH into Tornado Cash; initial transfers of approximately 1,000 ETH reported","source":""},{"date":"2024-12-09","event":"DEXX hacker transfers 4,700 ETH to Tornado Cash in a single batch","source":""},{"date":"2024-12-10","event":"Additional 300 ETH batch transferred to Tornado Cash by DEXX attacker; SlowMist founder Cosine confirms","source":""},{"date":"2024-12-14","event":"DEXX launches formal compensation portal for affected users","source":""},{"date":"2025-02-05","event":"DEXX opens compensation NFT staking portal, allowing affected users to participate in repayment scheme","source":""},{"date":"2025-02-08","event":"LBank announces $15 million seven-party coalition donation initiative for DEXX user compensation","source":""},{"date":"2025-02-18","event":"LBank reports more than 3,000 addresses have received compensation payments; compensation process at approximately 30% completion","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 17a0f12d-f48c-4e93-8ebb-eb72993ca3accopy