Author: Hella | Wonder Woman; Source: X@hella1413

15 years have passed since the DEXX theft incident Today, as a victim and the leader of a rights protection group, I have sorted out the complete timeline of the incident and the latest progress:

[November 16 Early morning] - The theft occurred

DEXX suffered a sudden large-scale asset theft. According to incomplete statistics from SlowMist, the total loss was 21 million USDT, with more than 1,000 victims and more than 8,000 stolen addresses involved.

[November 16, 6:00] - Establish a rights protection group

Spontaneously established by users The rights protection group (I, as one of the group leaders, organized a group of 3,500 people and large households) began to organize the collection of victim information, including helping to connect with SlowMist to monitor the flow of stolen funds.

[November 19] - The platform reported the case to the police and filed a case, and cooperated with Slow Mist in the investigation

The platform has filed a case, and SlowMist also stated that it has officially intervened and cooperated with law enforcement agencies in subsequent investigations.

[November 20] - Victims reported to the police in many places and filed cases

Since On the day of the incident, victims across the country successively called the police and successfully filed cases. According to incomplete statistics, dozens of case filing receipts have been received so far, and GA departments in many places across the country are getting involved.

[3:00 a.m. on November 24] - The attacker sold stolen assets for the first time

According to a large number of user feedback and SlowMist monitoring, the attacker has converted a large number of tokens on the Solana address into Sol, but has not yet transferred them out.

[November 25] - The victim community united to speak out

I wrote a An open letter "calling on the DEXX platform to take responsibility and recover user losses" has received vocal support from various big Vs. As of now,The post was read 620,000 times, boosting the event’s exposure.

[November 28] - Roy publicly stated that he would provide compensation

Founder Roy It said that it is negotiating with investment institutions and discussing with security experts to build a platform security upgrade plan; and it has been determined that the compensation path is to develop a new entrance on the platform and pay the compensation to a new address. Prior to this, Roy had also stated that he would pay full compensation to the victims.

[November 28] - The attacker's Solana address has been basically determined

Slow Mist announced an address list of the Solana chain containing 8,612 attackers (some victims counted some tokens according to the program, including 65,600 Sol, 3.4 million Ban, 51 W Luce1, and 1.5 million Shoggoth). And prompts for timely feedback on false positives or omissions. It also emphasized that the EVM chain data still needs to wait patiently for a few days before the investigation can be completed.

[Early morning of November 29] - The attacker's EVM address began to show abnormal changes

According to SlowMist monitoring, the attacker’s EVM address (ETH/BSC/BASE) has experienced changes in testing, but has not yet changed on a large scale.

[November 29, 19:00] - Du Jun expressed his intention to acquire

Du Jun, the founder of ABCDE Labs, stated on Twitter that he was communicating with the platform about the acquisition plan and asked users if they would continue to use it "if full compensation is paid and security is upgraded."

[November 30, 3:00] - The attacker exchanged a batch of EVM chain tokens for ETH/BNB, but has not yet transferred them out.

Asset flow: The attacker exchanged multiple on-chain assets into Sol/ETH/BNB, but has not yet transferred them out. The attacker's address on the Solana chain is basically determined, but the data on the EVM chain is still being cleaned.

Compensation plan: The platform said that it will wait until Slow Mist collects the data before formulating a compensation plan.

Current actionKey point: If the victim continues to have sex, he must use legal weapons to protect his legitimate rights and interests. At the same time, it also calls on all parties to continue to pay attention. Until the incident is resolved perfectly. I will also continue to pay attention and keep updated on the progress!

If there are any errors, please contact me to correct them. Thank you for your support.