Key facts
- An attacker drained $7.3 million from DxSale locker contracts on BNB Chain.
- The exploit affected over 1,400 legacy liquidity-provider positions.
- The drain was enabled by a silent ownership transfer, not a smart-contract bug.
- Security firms PeckShield and Coinsult reported the incident on May 29.
An attacker successfully drained approximately $7.3 million from over 1,400 legacy liquidity-provider positions held within old DxSale locker contracts on the BNB Chain. Security firms PeckShield and Coinsult identified the exploit on May 29. The breach was facilitated by a silent transfer of ownership of the contracts, rather than a vulnerability within the smart contract code itself. This method allowed the attacker to gain control and withdraw funds from numerous older pools.