What happened in the DxSale hack on BNB Chain?

DxSale suffered a security breach that drained approximately $7.3 million from liquidity pools on BNB Chain. The attack affected around 1,400 liquidity providers whose funds were locked through older DxSale liquidity locker contracts.

How much cryptocurrency was stolen from DxSale?

Blockchain analysts estimate the attacker extracted roughly $7.3 million worth of assets. PeckShield reported that at least $1.87 million worth of BNB was transferred through wallets that were later linked to exchange deposit addresses.

What caused the DxSale exploit?

Security researchers believe the exploit involved an old liquidity locker contract used by BNB Chain projects in 2021. Analysts claim a combination of privileged contract permissions and a backdated lock mechanism allowed the attacker to withdraw funds that were supposed to remain locked.

How many users were affected by the DxSale attack?

The attack reportedly affected around 1,400 liquidity providers. These users had liquidity locked through DxSale's infrastructure, making the exploit significant despite involving older contracts.

What is a liquidity locker and why does it matter?

A liquidity locker is a smart contract that prevents project teams from withdrawing liquidity for a specified period. Investors often view locked liquidity as a trust signal because it reduces the risk of rug pulls, making vulnerabilities in locker contracts particularly concerning.

Why are analysts worried about legacy DeFi contracts?

Older smart contracts may contain undiscovered vulnerabilities, outdated code, or privileged functions that were not identified during earlier audits. The DxSale incident highlights how dormant infrastructure can remain a security risk years after deployment.

Have the stolen DxSale funds been recovered?

There is currently no indication that the funds have been recovered. Analysts say some assets have already been routed through multiple wallets and exchanges, potentially making tracing and recovery more difficult.

What role did BNB Chain play in the exploit?

The exploit occurred on BNB Chain because the affected liquidity locker contracts were originally used by projects launched on the network. There is no indication that BNB Chain itself was compromised.

Image for illustrative purposes only. Not a real photo.

DxSale hack drains $7.3M from BNB

Written by Heidi Cuthbert Published May. 30 2026Last Updated May. 30 2026

DxSale was drained of approximately $7.3 million in a cyberattack that impacted around 1,400 liquidity providers on BNB Chain, raising fresh concerns about legacy DeFi infrastructure.

Blockchain security firm PeckShield said the attacker moved about $1.87 million worth of BNB through two primary wallets before transferring funds to multiple Binance deposit addresses.

“A privileged setFee plus a backdated lock turned 'locked' deposits into a withdrawable balance,”

Said Web3 security firm Coinsult in its analysis of the exploit.

Blockchain analyst Tahax alleged that the attack exploited an old liquidity locker contract originally used by token projects on BNB Chain in 2021 and claimed ownership of the contract had been quietly transferred through multiple wallets before reaching the attacker.

The analyst also said the exploiter wallet was newly created and funded through Bybit, while some of the stolen assets have already been routed through infrastructure that may make tracing and recovery more difficult.

The breach comes as DeFi protocols continue to face security challenges, although exploit-related losses have fallen to $52 million so far in May from $634 million in April, according to DefiLlama.

The latest incident adds to more than $17 billion in cumulative crypto exploit losses tracked by DefiLlama and has intensified debate about the security of decentralised finance platforms as artificial intelligence tools increasingly assist attackers in identifying smart contract vulnerabilities.