DxSale exploit drains $7.3M in BNB through hidden contract backdoor
DxSale has suffered a $7.3 million exploit after an attacker allegedly used a hidden backdoor in a liquidity locker contract to withdraw BNB locked by more than 1,400 liquidity providers on the BNB Chain.DxSale lost $7.3 million in a BNB Chain exploit affecting roughly 1,400 liquidity providers.Researchers linked the attack to a hidden contract backdoor and a previously undisclosed ownership transfer.The incident follows a wave of DeFi exploits, with protocols losing $52 million to hacks so far in May. According to blockchain security firm PeckShield, the attacker-controlled address “0xC457” moved approximately $1.87 million worth of BNB into two primary wallets before sending the funds to multiple deposit addresses associated with Binance. The incident affected liquidity that had remained locked in DxSale contracts since the platform was widely used for token launches on BNB Chain in 2021. Early findings from blockchain analyst Tahax suggest the exploit may have originated from a contract ownership change that took place months before the attack. Tracing the ownership history further, Tahax said more than 80 additional transactions were used to pass control between wallets before it eventually reached the address identified as “0xC45,” which later executed the large-scale BNB withdrawals. The analyst also noted that the exploiter wallet was newly
