Dexx hacking incident has confirmed that more than 100 million yuan was stolen, and its platform has problems with private key storage and private key export plaintext transmission

PANews reported on November 16 that according to official news, BitJungle system monitoring, after preliminary investigation, a large-scale theft of user assets on the Dexx trading platform has been confirmed to have reached hundreds of millions of yuan, and hackers are still continuing to commit crimes and actively transferring user assets. The risk of internal crimes cannot be ruled out at present. After in-depth technical analysis, the Dexx trading platform has the following serious security issues:

• Private key storage: The Dexx platform is a non-custodial platform, but it records user private keys. Once the system is attacked, hackers can easily obtain user private keys and steal user assets.
• Private key export and plain text transmission: Dexx platform does not take any encryption measures when users export private keys, resulting in the private keys being exposed in plain text during transmission, which can be easily intercepted by hackers.