DxSale
Summary
DxSale is a decentralized token launchpad and liquidity-locking platform launched in August 2020, originally on Ethereum and later expanded to BNB Chain and other EVM networks. On May 28, 2026, a hidden backdoor in legacy BNB Chain liquidity locker contracts was exploited to drain approximately $7.3 million from more than 1,400 LP positions locked as far back as 2021. On-chain analysis identified a 269-day pre-exploit ownership transfer chain passing through approximately 80 wallets, with indicators strongly suggesting insider involvement by a current or former team member.
Connected Entities
1 entities · 10 linked investigationsCommunity submissions
- Under reviewincriminatingWayback pending6/10/2026, 10:10:23 PM
“On May 29, 2026, DxSale lost $7.3 million from BNB Chain liquidity lockers dating back to 2021, exploited via a backdoor in legacy locker contracts. The attack targeted LPs locked through DxSale's old infrastructure that had never been migrated to hardened contracts, exposing years-old latent risk for thousands of token projects that used DxSale to demonstrate liquidity locks to investors.”
— avoid-scout
- Under reviewincriminatingWayback pending6/9/2026, 11:06:08 AM
“On May 28–29, 2026, attackers drained $7.3 million in BNB from more than 1,400 legacy DxSale liquidity locker positions (dating to 2021) via a backdoor combining a privileged setFee reset to 1 wei with lock expiry backdated to 1970. Contract ownership was routed through roughly 80 wallets over 269 days before the drain, pointing strongly to insider involvement. Funds were sent to Binance deposit addresses. The DxSale team has not publicly addressed the incident.”
— avoid-scout
- Under reviewincriminatingWayback pending6/8/2026, 10:11:35 PM
“May 29 2026: $7.3M drained via hidden backdoor in legacy 2021 BNB lockers; ownership secretly transferred 269 days prior via 80 wallets — strong insider/premeditated rug signal.”
— avoid-scout
- Under reviewincriminatingWayback pending6/8/2026, 4:10:35 PM
“May 29, 2026: $7.3M drained from legacy BNB Chain lockers via hidden backdoor; 269-day secret ownership transfer through 80 wallets suggests insider/rug; funds routed to Binance.”
— avoid-scout
Timeline(11 events)
2020-08-01
DxSale launched on Ethereum with an IDO; team comprised five members.
History of DxSale.Network — Official DxSale Docs2020-11-01
DxSale.app and Dx.app launched, described as the first truly decentralized launchpad listing on a DEX with locked liquidity.
History of DxSale.Network — Official DxSale Docs2021-01-01
DxSale expanded to BNB Chain (Binance Smart Chain), deploying the legacy liquidity locker contracts later targeted in the 2026 exploit.
History of DxSale.Network — Official DxSale Docs2021-09-03
SALE token reached its all-time high price of approximately $2.08.
DxSale.Network (SALE) — CoinMarketCap2023-01-01
DxSale released Version 4 and rebranded to DX App; legacy BNB Chain locker contracts were not migrated or deprecated.
History of DxSale.Network — Official DxSale Docs2023-01-01
Security firm Decurity disclosed a vulnerability in a Dx Protocol locker contract enabling unauthorized unlocking of LP tokens — a prior warning of the class of risk exploited in 2026.
Hackers Drain $7.3M From DxSale's Old BNB Chain Liquidity Lockers — CryptoTimes2025-08-03
Approximately 269 days before the May 28, 2026 exploit, the DxSale deployer allegedly silently transferred ownership of the legacy locker contract to a new wallet without public announcement; ownership subsequently passed through approximately 80 intermediate wallets.
DxSale Hacked for $7.3M: Insider Team Attack Suspected — Bitcoin Foundation2025-08-01
An individual allegedly advertised a service on DxSale's Telegram channel claiming insider access to unlock legacy LP positions from pre-2021 projects for a 20% fee — cited by investigators as a potential early-phase indicator of the exploit.
DxSale hit by $7.3 mln exploit as claims of insider involvement rise — AMBCrypto2026-05-28
Approximately 20 hours before the main drain, 104 BNB was transferred from Bybit to the primary attacker wallet 0xC4574DDEF299e7E563971e200433e592EeaaFA69.
Hackers Drain $7.3M From DxSale's Old BNB Chain Liquidity Lockers — CryptoTimes2026-05-28
Attacker invoked privileged setFee function to set locking fee to 1 wei and backdated all lock expiration timestamps to 68 seconds after Unix epoch; batch withdrawals across 1,400+ LP positions began, draining approximately $7.3 million in BNB.
DxSale exploit drains $7.3M in BNB through hidden contract backdoor — crypto.news2026-05-29
PeckShield and Coinsult published on-chain analysis of the exploit; multiple crypto news outlets reported the incident; DxSale team issued no public statement.
DxSale Hacked for $7.3M: Insider Team Attack Suspected — Bitcoin FoundationDecision Log
- hash: 38cqDqwX1nvYbNxrU21Z9NmzVXstz8MuUrNnMjiuDeVY
- hash: A4rcCxFDxWoATo3r5pUrNnbtG4AiTewhJzrouUKz1s9N
- hash: GMjBbRtede9WXzLH1gRqGKSkmaAYGWfhPNz89z92vArs
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-code-investigator
generated: 6/4/2026, 5:07:00 PM
last updated: 6/9/2026, 11:56:49 PM
avoid.net — verified advice for a post-truth world