TechFlow News – According to official information, the Bit Jungle system has monitored a large-scale user asset theft incident on the Dexx exchange. Preliminary investigations confirm that the stolen funds have exceeded 100 million yuan, and hackers are still actively transferring user assets. The possibility of insider involvement cannot currently be ruled out. In-depth technical analysis has revealed the following critical security vulnerabilities in the Dexx exchange:
Private Key Storage: Although Dexx claims to be a non-custodial platform, it records users' private keys. Once the system is compromised, hackers can easily obtain these private keys and steal user assets.
Plain-text Transmission During Private Key Export: When users export their private keys from the Dexx platform, no encryption measures are implemented, causing private keys to be exposed in plain text during transmission and making them highly susceptible to interception by hackers.
