Previously, we reported on the on-chain meme exchange DEXX, which used high commission rates to attract KOLs to participate in marketing, and the incident of the private key leak. Later, there were reports that it was confirmed to be an inside job, but no definitive answer has been obtained yet. However, the records on the blockchain cannot be falsified. This morning, it was reported that the addresses associated with the DEXX hackers had exchanged the remaining tokens for Solana, but there has been no further transfer out yet.
Table of Contents
ToggleRumor: DEXX was an inside job, with a daily net profit of 300,000 before the incident
DEXX's main user base is in the Chinese community, and recently a article has been circulating wildly on WeChat. The author, who goes by the name "Encrypted Intelligence Orange", pointed out that the DEXX incident was not the CEO running away to Thailand, as commonly perceived, but rather an inside job by employees. The four new employees, envious of the boss's lucrative earnings, committed the crime. The chat records in the article show that DEXX's trading volume exceeded 50 million, and the company's daily net profit reached 30 million, so there was no need to kill the goose that lays the golden eggs now.
The article also revealed that the police have filed a case and arrested some suspects, with two of them having fled to Southeast Asia. One of the KOLs involved in the promotion, surnamed Wang, has also been arrested. However, the article has not been confirmed by DEXX's founder, and the original text has been deleted. After the article was published, DEXX founder Roy stated: "Once the money is recovered, I will reveal the whole truth. Be patient, the truth is very close, and I cannot disclose too much to affect the process."
Yuqian: The investigation difficulty exceeded expectations
Yuqian, the founder of SlowMist who is assisting the victims in the investigation, said that there are already over a thousand victims who have filled out the claim form. However, the difficulty of this investigation has exceeded expectations, as there are three types of false reports:
- Those with malicious intent or unintentional false reports.
- The hackers' batch theft scripts were too crude, and many tokens were not stolen immediately, allowing the victims to handle it themselves, making it difficult to determine which addresses belong to the victims and which to the hackers.
- The hackers deliberately created false records to contaminate several victim addresses.
He stated that he cannot disclose too much about the law enforcement part, but if the law enforcement agencies get involved, these false reports could lead to a major disaster.
DEXX founder responds: We will not run away, and are working on a compensation plan
This morning, the Twitter account @Fkey666 reported that the hacker addresses associated with DEXX had started selling BAN tokens and exchanging them for Solana. This news was also confirmed by Yuqian, the founder of SlowMist, who stated that these tokens had been gradually exchanged for Solana since 3 AM UTC+8, but the addresses have not made any further transfers yet.
Roy also responded that they are currently formulating a compensation plan and will carefully verify each user's loss. He also emphasized that the DEXX team has not run away and has not dismissed the team since the incident. Additionally, the platform still has a weekly trading volume of 2 million, generating 20,000 in revenue.





