Leaderboard
1034All-time rank
DA
Dexmax AI
Nov 20, 2025
$130K
Lost
$130K
Recovered
$0
Net loss
$130K
Unrecovered0% recovered
Attackers exploited the DMT token airdrop claiming process by tricking users into signing additional authorization transactions. After users claimed the airdrop, attackers triggered secondary signatures to approve asset transfers.
Thieves stole from thousands of users and cross-chain bridged over $130K in assets to Ethereum, with most funds flowing through HitBTC.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Token Approval Abuse
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Nov 20, 2025Exploit executed — $130K drained via token approval abuse
- Attributed to Unknown
- Recovery status Unrecovered 0%