复盘DEXX用户资金大规模被盗事件,链上安全非儿戏

Odaily星球日报Published on 2024-11-16Last updated on 2024-11-16

Abstract

遭攻击还是监守自盗?链上辛苦几个月,却是为黑客打工。

原创 | Odaily星球日报(@OdailyChina

作者 | Asher(@Asher_ 0210 

复盘DEXX用户资金大规模被盗事件,链上安全非儿戏

今晨,本应结束一晚上忙碌“打狗”工作的各大 Meme 社区成员因为一则消息瞬间炸开了锅。链上交易终端 DEXX 遭遇攻击,多名用户证实其资金被转移。本次攻击范围涉及多链,转移资产代币种类也极多,多个 meme 币遭抛售出现短时快速下跌。

Dexx 是一个全链 Memecoin 交易平台,支持 SOL、ETH、TRX、BASE、BSC 等多种链上资产。主要宣传其拥有链上移动止盈止损、热点概念推送、聪明钱包追踪推送、翻倍出本、一键防夹、一键跟买跟卖等功能。

针对 DEXX 用户资金被盗事件,慢雾创始人余弦在 X 平台发文表示,被盗人群与用 DEXX 做冲土狗/炒 MEME 有关,私钥属于 DEXX 中心化托管,肯定泄露了,至于泄露方式等调查披露。一时间,各大 Meme 社区谩骂声四起:

  • “半夜被喊醒,发现 DEXX 被盗走 2 万美元,辛苦打了一个月的成果付之东流,再也不碰这种中心化钱包了”;

  • “无语了,刚注册好转了 100 枚 SOL 进去就被盗了。难怪那么多 KOL 推荐”;

  • “我清仓了所有 Meme,这次很多钱包被盗,黑客盗了币都会砸盘,发酵以后,所有 Meme 都有可能被砸盘,带崩”;

    ......

被盗人数多、金额大

由于本次被盗的用户众多,第一时间“维权群”就被建立了起来,并开始登记被盗信息,下图为被盗资金记录情况(由于为被盗用户自行填报,仅部分数据已证实为真)。同时,慢雾创始人余弦也发文表示:“根据社区用户提交的数据,我们计算出 DEXX 被盗损失达数百万美元,这些资金目前分散在多个不同的黑客地址中。”

也有其他社区用户统计的总金额超过千万美元,因目前尚未对地址完成全部统计,被盗金额暂无法最终确定,但从社区用户的反馈中可见,被盗数万甚至数十万、数百万的用户不少。

复盘DEXX用户资金大规模被盗事件,链上安全非儿戏

DEXX 维权群中用户登记被盗信息部分截图(名字已打码)

DEXX 官方回应并未 RUG,监守自盗质疑四起

被盗事件发生后,DEXX 中文官方于 X 平台发文回复:“目前 DEXX 已注意到多名用户反馈的代币被转走问题,多家专业安全审计团队已经在着手进行分析排查。团队正在全力解决,没有 Rug。后续进展会第一时间通过站内推送及 X/Telegram 通知给大家同步消息。”

复盘DEXX用户资金大规模被盗事件,链上安全非儿戏

DEXX 中文官方回应用户大规模被盗事件

DEXX 创始人个人信息也被扒出。DEXX 创始人 Roy(@honza 204)随后针对被盗事件回应表示:“会掏钱补,隔离了部分用户,没 RUG,在排查,无法一一回复,放心。”

复盘DEXX用户资金大规模被盗事件,链上安全非儿戏

DEXX 创始人回应用户大规模被盗事件

但这一回复目前尚无下文,用户也并不买单,纷纷质疑 DEXX 为蓄意跑路、监守自盗。

DEXX 在本轮 Meme 热潮中蹿红时间不长,主要依赖 KOL 推广而迅速获取用户,据 KOL 向 Odaily 透露,当前 Bot 为迅速获取用户,给到的返佣十分高额,最高甚至达到手续费的 50% -60% ,在当前金狗频出的情况下,这样的收入相当不菲。

而 DEXX 事件发生后,不少此前疯狂推广、将 DEXX 描述为“链上币安”的 KOL 开始快速删帖和与之切割,遭到网友吐槽最多的是之前晒出天价返佣的 X KOL 游民@youmin 8341 。

事件发生后,游民第一时间发推 @ DEXX 创始人,并表示自己的返佣从未提现,被网友排队调侃“两棍打散兄弟情,笔录全是兄弟名。”

复盘DEXX用户资金大规模被盗事件,链上安全非儿戏

复盘DEXX用户资金大规模被盗事件,链上安全非儿戏

安全建议

Meme 无疑是本轮牛市造富机会最多的热门板块,进行链上操作、使用各类 BOT 也成为了用户的日常习惯。而本次“DEXX 遭遇攻击,用户资金被盗”事件也应为行业敲响警钟。避免“辛苦打狗几个月赚的 Sol,却是为黑客打工”类似事件发生,Odaily星球日报也整理了一些安全建议,希望大家务必对链上资产安全慎之又慎:

  • 不要轻信他人推荐,研究好产品机制,建议使用私钥不存储在服务器的 BOT;

  • 选择运营时间较长、团队过硬且没有安全事故记录的 BOT;

  • TG 群中切勿点击陌生连接,不要回复任何私信;

  • 无论使用任何工具,大额资金交易完建议提现转出到自托管钱包;

  • ......

此前 Bnanagun、Unibot 等都曾发生被盗事件,DEXX 也不会是最后一起。

记住,在 Web3 的黑暗森林中行走,活到明天的人才有机会。

Trending Cryptos

Related Reads

Are the Frantic Acquisitions of Crypto Companies by Giants Good or Bad?

In a bear market, giants are actively acquiring crypto companies. Recent months have seen at least five major deals: Samsung Securities bought a 2% stake in Upbit operator Dunamu; Robinhood acquired WonderFi for $180 million to enter the Canadian market; Figure purchased Kiavi for $717 million to expand into on-chain real estate credit; Franklin Templeton bought 250Digital to launch Franklin Crypto; and Blockworks acquired data platform Messari at a steep discount—over 90% less than its 2022 $300 million valuation. These moves highlight a strategic shift. Cash-rich giants are consolidating resources at low cost, targeting companies with established compliance frameworks to navigate tightening global regulations. Acquisitions like WonderFi and the Upbit stake provide immediate market access and licensed user bases. Figure's deal signals real-world asset (RWA) tokenization moving from concept to large-scale implementation, with Kiavi's $7+ billion annual transaction volume being integrated into on-chain capital markets. Franklin Crypto's launch targets institutional investors like pension funds, offering them tailored, compliant crypto strategies. For these strategic players, bear markets present an ideal entry point: valuations are depressed, speculative noise is minimized, and they can acquire robust technology and compliance infrastructure at a fraction of the cost. This acquisition wave marks a transitional phase for crypto—from a wild frontier toward an institutional, regulated financial system. Giants are positioning themselves to capture future growth when macroeconomic conditions and liquidity improve, leaving latecomers behind.

marsbit42m ago

Are the Frantic Acquisitions of Crypto Companies by Giants Good or Bad?

marsbit42m ago

In the MiCA Era, Europe's New Cryptography Landscape: Why is Germany Taking Center Stage?

With MiCA's transitional arrangements concluding, Europe's crypto industry has undergone a regulatory consolidation. Post-MiCA, platforms must secure CASP authorization to operate compliantly within the EU. As of July 1st, only about 12% of crypto firms have received authorization, with Germany emerging as a key player, holding 57 authorizations (roughly 23% of the EU total). This positions Germany as a primary compliance gateway to the EU's unified market. Germany's advantage stems from its established, function-based regulatory framework, which integrated crypto activities into existing banking, securities, and payment systems pre-MiCA. This allowed a smoother transition and attracted both domestic platforms (like Bitcoin.de, BISON) and international ones (like Coinbase Germany). A distinctive trend is German banks becoming direct retail entry points for crypto services. Examples include DZ Bank integrating "meinKrypto" into its VR Banking App and the Sparkassen savings bank network planning to offer crypto trading via DekaBank. This mainstreams crypto access for ordinary users. Beyond trading, Germany is evolving into a digital asset infrastructure hub. Deutsche Börse Group's Clearstream is developing a next-generation platform for issuing, settling, and servicing both traditional and tokenized securities. Furthermore, German banks like DekaBank and DZ Bank are key participants in the Qivalis project, a European initiative for a regulated euro stablecoin, positioning Germany at the intersection of critical future capabilities like custody, settlement, and cross-border services.

marsbit1h ago

In the MiCA Era, Europe's New Cryptography Landscape: Why is Germany Taking Center Stage?

marsbit1h ago

Trading

Spot

Hot Articles

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of MEME (MEME) are presented below.

活动图片