DxSale Suffers $7.3M Exploit Due to BNB Chain Compatibility Issue

Panewslab

DxSale Suffers $7.3M Exploit Due to BNB Chain Compatibility Issue

First seen 30 May 2026, 17:25 UTC • •64.5

Article Content

1 / 6

Browse articles

ThreatCluster •May 31, 2026 at 17:19 UTC

•The security incident involved a $7.3 million theft from DxSale's v1 lockup contracts.
•Only the v1 contracts launched in 2021 were affected; v2 and later contracts are secure.
•The exploit was enabled by a compatibility issue with BNB Chain's Atomic Transaction feature.

On May 30, 2026, DxSale reported a security incident involving a vulnerability in its v1 lockup contracts, launched in 2021, caused by a compatibility issue with BNB Chain's Atomic Transaction feature. The exploit led to the theft of approximately $7.3 million from over 1,400 liquidity pools. The affected contracts were identified, and it was confirmed that v2 and later contracts are secure and unaffected, having passed CertiK audits. The attack involved manipulating ownership through a backdoor contract, with the attacker transferring 2,958 BNB (around $1.87 million) to multiple wallets. DxSale reassured users that their funds in v2, v3, and subsequent versions remain safe. The incident has drawn significant market attention due to the scale of the theft and the nature of the vulnerability.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 148d ago How this analysis works

Timeline

2026-05-29

Exploit of v1 lockup contracts

Approximately 1,400 liquidity pools were exploited, resulting in a theft of $7.3 million due to a backdoor contract.

2026-05-30

DxSale releases statement on security incident

DxSale confirmed the vulnerability was linked to BNB Chain's Atomic Transaction feature affecting only v1 contracts.

2026-05-30

CertiK audit confirms security of v2 and above

DxSale stated that all contracts from v2 and beyond are secure and unaffected by the incident, having passed audits.

2026-05-31

Further statement released by DxSale

DxSale reiterated that the vulnerability is confined to the early v1 architecture and assured users of the safety of later contracts.

More articles in this cluster (5)

Threat Graph

9 entities, 11 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Data Breach
Zero-day Exploit

Organization (2)

DxSale
DxSale.Network

Affected Platform (5)

Atomic Transaction
Binance Smart Chain
BNB Chain
BSC
PancakeSwap

Relationships

Data Breach targets Atomic Transaction
Data Breach targets Binance Smart Chain
Data Breach targets BNB Chain
Data Breach targets BSC
Zero-day Exploit targets Atomic Transaction
Zero-day Exploit targets Binance Smart Chain
Zero-day Exploit targets BNB Chain
Zero-day Exploit targets BSC
Data Breach related to DxSale
Data Breach related to DxSale.Network
Data Breach related to PancakeSwap

Following this threat?

Track DxSale in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing…

Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…