{"id":606598,"date":"2026-05-29T10:22:16","date_gmt":"2026-05-29T10:22:16","guid":{"rendered":"https:\/\/Blockchain.News\/news\/dxsale-exploit-7m-bnb-chain"},"modified":"2026-05-29T10:22:16","modified_gmt":"2026-05-29T10:22:16","slug":"dxsale-exploit-drains-7-3m-from-1400-bnb-chain-liquidity-pools","status":"publish","type":"post","link":"https:\/\/e-bitco.in\/index.php\/2026\/05\/29\/dxsale-exploit-drains-7-3m-from-1400-bnb-chain-liquidity-pools\/","title":{"rendered":"DxSale Exploit Drains $7.3M From 1,400 BNB Chain Liquidity Pools"},"content":{"rendered":"
\n

Rongchai Wang<\/a> May 29, 2026 10:22<\/span> <\/p>\n

DxSale’s legacy liquidity locker on BNB Chain was exploited, draining $7.3M across 1,400 pools. Analysts point to backdoor vulnerabilities.<\/p>\n

\"DxSale <\/a> <\/figure>\n

Memecoin launch platform DxSale was hit by a $7.3 million exploit, impacting over 1,400 liquidity<\/a> pools on the BNB Chain. The attack has raised fresh concerns about the security of decentralized finance (DeFi) platforms, as vulnerabilities in DxSale\u2019s legacy liquidity locker were exploited.<\/p>\n

According to blockchain security firm PeckShield, the attacker\u2019s wallet, identified as “0xC457,” transferred approximately 2,958 BNB (valued at $1.87 million) to two primary wallets before funneling the funds into Binance deposit addresses. This suggests an attempt to obscure the stolen funds through centralized exchange infrastructure.<\/p>\n

The exploited contract reportedly dates back to 2021 and had been used to lock liquidity for various token launches on the BNB Chain. On-chain analyst Tahax revealed that the contract\u2019s ownership was quietly transferred to a new wallet 269 days prior to the exploit, in August 2025, without an official migration announcement. This change may have introduced or exposed a backdoor vulnerability that allowed the attacker to extract funds.<\/p>\n

Systemic Vulnerabilities in DeFi<\/h2>\n

The attack highlights growing concerns about the security of DeFi protocols, especially legacy systems that may house long-standing vulnerabilities. Web3 security platform Coinsult identified a critical issue in the contract\u2019s code, describing how a combination of a \u201cprivileged setFee\u201d function and a backdated lock enabled the attacker to turn so-called locked deposits into a withdrawable balance.<\/p>\n

While DeFi hacks have been a persistent problem, May 2026 has seen a decline in overall losses compared to April\u2019s $634 million\u2014a one-year high. However, this latest attack brings May\u2019s total to $52 million, per DefiLlama. Since the inception of DeFi, over $7.8 billion in losses have been attributed to protocol exploits.<\/p>\n

Funds Likely Unrecoverable<\/h2>\n

Analysts suggest that recovering the stolen funds may prove difficult. The attacker leveraged intermediary wallets and centralized exchanges to obfuscate the flow of stolen BNB tokens. Additionally, the slow, staged approach to draining liquidity pools indicates a calculated effort to avoid detection during the early phases of the attack.<\/p>\n

Some observers speculate that the exploit required insider-level knowledge, given the complexity of the exploit\u2019s execution and the backdoor\u2019s potential existence within DxSale\u2019s legacy locker for years. DxSale has yet to release an official statement or provide clarity on the total number of affected users.<\/p>\n

What\u2019s Next for DeFi Security?<\/h2>\n

This incident underscores the risks of relying on outdated or poorly maintained smart contracts in the DeFi ecosystem. As malicious actors increasingly use advanced tools, including AI, to identify vulnerabilities, industry leaders are calling for more stringent security audits and proactive measures to safeguard user funds.<\/p>\n

For DxSale, the fallout from this exploit extends beyond financial losses. Questions about transparency, contract maintenance, and user protections are likely to dominate the platform\u2019s immediate future. Meanwhile, liquidity providers impacted by the hack will be closely watching for any updates on potential restitution efforts.<\/p>\n

Image source: Shutterstock<\/i><\/span> Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Rongchai Wang May 29, 2026 10:22 DxSale’s legacy liquidity locker on BNB Chain was exploited, draining $7.3M across 1,400 pools. Analysts point to backdoor vulnerabilities. Memecoin launch platform DxSale was hit by a $7.3 million exploit, impacting over 1,400 liquidity pools on the BNB Chain. The attack has raised fresh concerns about the security of […]<\/p>\n","protected":false},"author":1,"featured_media":606599,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[5702,8676,23,25385,25],"class_list":{"0":"post-606598","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-blockchain","8":"tag-bnb-chain","9":"tag-crypto-hacks","10":"tag-defi","11":"tag-dxsale","12":"tag-news"},"_links":{"self":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts\/606598","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/comments?post=606598"}],"version-history":[{"count":0,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts\/606598\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/media\/606599"}],"wp:attachment":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/media?parent=606598"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/categories?post=606598"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/tags?post=606598"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}