PANews reported on November 30 that according to the monitoring of SlowMist Technology founder Yu Xian, starting at 2:48 a.m., the DEXX attackers successively exchanged tokens on a batch of EVM (ETH/BASE/BSC) addresses related to the attackers for corresponding ETH/BNB. The exchange is still ongoing, and these ETH/BNB have not been transferred out yet (but relevant tests have been found).