According to PANews on November 26, SlowMist founder Yu Xian said on the X platform: "We checked the monitoring early in the morning. Starting at about 3 a.m., various tokens on the Solana addresses related to the DEXX attacker were exchanged for SOL in large quantities. Currently, these SOLs have not been transferred out."