DxSale Releases Statement on Security Incident: v2 and Above Lockup Contracts Unaffected

On May 31, DxSale released a statement regarding a recent security incident. The vulnerability stemmed from a compatibility issue between the newly launched Atomic Transaction feature on the BNB Chain and the earlier v1 lockup contracts. The affected contracts were the v1 lockup contracts launched in 2021. The issue has been identified and analyzed, and it has been confirmed that v2 and above lockup contracts are unaffected. The relevant contracts have passed CertiK audits, ensuring the safety of the locked assets. DxSale emphasized that all lockup funds in subsequent versions such as v2 and v3 have not been impacted by this incident, and the vulnerability is limited to the early v1 architecture. On May 29, approximately 1,400 old LPs from 2021 on the BNB Chain were exploited, resulting in a theft of $7.3 million, with the attacker manipulating ownership through a backdoor contract. The involved address 0xC4574DDE...2EeaFA69 transferred 2,958 BNB (approximately $1.87 million) to two main wallets, subsequently depositing into multiple an exchange deposit addresses and exchanging tokens via PancakeSwap.