【Focus on Meme Black Swan: The Major Hack of On-chain Exchange DEXX】As of November 17, the data statistics of BTC, ETH, and TON on the TrendX platform are as follows:BTC had 18.23K mentions last week, down 13.67% from the previous week. The price on Sunday last week was $91,956, an increase of 13.2% from the previous Sunday.ETH had 4.27K mentions last week, down 26.98% from the previous week. The price on Sunday last week was $3,134, a decrease of 2% from the previous Sunday.TON had 777 mentions last week, down 3.63% from the previous week. The price on Sunday last week was $5.52, a slight increase of 0.2% from the previous Sunday.On the night of November 16, the decentralized trading platform DEXX suffered a major cyberattack, leading to the illegal transfer of many users' assets. According to affected users, DEXX may have suffered losses of tens of millions of dollars from the attack, with the total amount potentially reaching over $100 million. Web3 security expert and founder of SlowMist Technology, Yu Jian, pointed out that users' private key information had been leaked, though the exact method of the leak is still under investigation. Trust in the DEXX platform among on-chain markets has plummeted to rock bottom, with some even suspecting an inside job. While the truth remains elusive, this large-scale asset theft on DEXX has dealt a significant blow to the highly active on-chain Meme market and once again reminded people of the importance of asset security on the blockchain.🤔Is DEXX an Inside Job? Latest Developments on the Incident DEXX holds an important position in the Meme sector, being an on-chain DEX specializing in providing liquidity and trading services for Meme tokens. It also supports Meme coin project launches, staking, and lending services, forming a complete Meme financial ecosystem. DEXX has long ranked at the forefront of daily trading volumes among DEXs, earning it the title of the "Binance of the Meme coin market." Regarding the issue of stolen user private keys, DEXX operates via smart contracts, with users controlling their own asset private keys, which should, in theory, make it safer. So, where did the problem arise?According to monitoring from Bit Jungle, the large-scale theft of user assets on the DEXX platform has been preliminarily confirmed, with stolen funds exceeding $100 million, and hackers are still actively transferring user assets. After an in-depth technical analysis, the following major security issues were identified with the DEXX platform:Private key storage: Although DEXX is a non-custodial platform, it recorded users' private keys, meaning that once the system was attacked, hackers could easily obtain users' private keys and steal their assets.Unencrypted private key export: When users exported their private keys, no encryption measures were taken, exposing the private keys in plaintext during transmission, making them highly vulnerable to interception by hackers.Official DEXX Statement: The latest news on November 17 reveals that DEXX founder Roy responded to concerns about his absence on X, stating: "Due to special circumstances, we cannot update our status at the moment. Please give us more time to resolve things satisfactorily." The day before, DEXX's official statement assured that the team was working hard to fix the issue and that there was no rug pull, promising to keep users updated on further progress. Roy also mentioned that the company would cover the losses, and some users’ funds had been isolated.Market Reaction: However, as the stolen amount continues to rise, can DEXX really compensate users' losses? Most users are highly skeptical, with many dismissing Roy's claim that the platform will cover the losses, believing instead that this is an inside job. Trust in DEXX has plummeted.Some users stated that DEXX, like many trading bots, has been "running naked" in terms of security. The community discovered that, according to developer tools’ export_wallet request information, when users exported their DEXX private keys, the private key was presented in plaintext, meaning that user private keys were effectively stored on official servers. If the communication was not encrypted, attackers could intercept users' private keys during transmission. Even with HTTPS transmission, plaintext key transfer could lead to privacy data leakage due to browser vulnerabilities or other security issues. As a result, some users joked that "DEXX has redefined the concept of a non-custodial wallet."Additionally, wallet application OneKey revealed that DEXX had repeatedly requested permission to "upload clipboard contents," potentially uploading users' clipboard data, warning that "if you’ve copied your private key or seed phrase on your phone, transfer your assets immediately."📱Which Memes Are at Risk of a Sell-Off? What Impact Could This Have on the Market? According to GMGN data on the 16th, BAN, LUCE, PNUT, and other Meme tokens showed varying degrees of decline, possibly due to the DEXX theft:BAN dropped approximately 30% since the incident.LUCE dropped approximately 20% since the incident.PNUT dropped as much as 12.5% since the incident.Key Point 1:The theft is not over yet! If the DEXX security team cannot resolve the issue promptly, hackers may continue stealing users' assets. As of November 17, based on information from over 500 victims, it's estimated that at least $13 million has been stolen, but this number only reflects the amount reported by the 17th. The actual amount could be much higher, as besides USDT, many newly popular Meme tokens such as $BAN, $Pnut, and $BITCAT, as well as SOL, have also been stolen. We especially remind users that Meme tokens, particularly those with low liquidity, are high-risk assets.Key Point 2:Regarding the stolen funds, Web3 security team Beosin Alert issued a statement on the 16th stating that the hackers have not yet moved the funds. They have collected around 2,800 victim addresses and analyzed over 9,000 transactions involving stolen funds. Their analysis shows that the stolen funds remain in addresses controlled by the hackers and have not yet been transferred.This means that the hackers’ “ultimate goal” has not yet been revealed, like a sword hanging over the market. No one knows whether these Meme tokens will be suddenly dumped. Coupled with the common FOMO sentiment in the Meme space, this incident could have an immeasurable impact on the Meme sector and even the entire crypto market. It might cause many Meme tokens to go to zero, crippling the once-booming Meme field and undermining the vitality and confidence of the entire crypto market.🔒How to Safely Store Funds? The Meme sector is undoubtedly a hotbed of wealth creation in the current bull market. On-chain trading and the use of various automated tools (especially BOTs) have become the new norm for users. However, given past thefts involving projects like Bananagun and Unibot, and now the DEXX incident, security must remain a top priority for the industry. Investors must stay vigilant to ensure the safety of their assets.Users can take the following measures to ensure the security of their funds:Use hardware wallets to store assets Hardware wallets, as a type of cold wallet, do not connect to the internet, avoiding most online attacks. Users are advised to use mainstream hardware wallets such as Ledger or Trezor. Make sure the wallet firmware is updated to the latest version. Keep your seed phrase secure, and avoid storing it digitally (e.g., in photos or the cloud).Diversify asset storage Avoid "single point of failure" by spreading your assets across multiple wallets. Do not concentrate them in one address or exchange. It's recommended to store primary assets in cold wallets and keep a small amount for trading in hot wallets.Choose decentralized custody solutions Users are advised to select truly decentralized custody solutions, avoiding the risks of centralized exchanges. Multi-signature wallets, which require multiple parties to approve transactions, can further enhance security.Review the security of exchanges or platforms Ensure that exchanges conduct regular third-party security audits and implement recommendations to protect users' funds. Users with the necessary technical knowledge should also assess the platform’s fund custody mechanisms (e.g., the ratio of cold to hot wallets, multi-signature protection).Purchase insurance or participate in decentralized risk hedging In addition to the above, users can purchase crypto insurance to cover losses from hacking (e.g., InsurAce or Bridge Mutual).Here are some additional security tips for users:Be cautious with recommendations: Before trusting someone’s recommendation, thoroughly research the product mechanism. We recommend using automation tools (like BOTs) that do not store private keys on servers.Choose reputable tools: Opt for tools with a long track record, strong team, and no history of security issues.Beware of online scams: On any social platform, such as Telegram groups, avoid clicking unknown links or responding to unsolicited messages.Protect large transactions: After completing large fund transfers with any tool, move the funds to your own wallet.Finally, we recommend reading or revisiting SlowMist founder Yu Jian’s "Blockchain Dark Forest Survival Manual." Safety is the top priority when navigating the blockchain’s dark forest.Research Report⬇️