Private keys stored client-side; mass drain.
Attacker wallets funded and staged ahead of the smart contract bug exploit against DEXX.
$21.0M drained from DEXX on Solana via Smart Contract Bug.
CertiK flagged the anomalous transactions and published an initial alert.
DEXX paused affected contracts or withdrawals and began tracing outbound flows.
Stolen assets followed through mixers, bridges, and exchange deposit addresses.
No assets recovered; losses absorbed by the protocol, insurers, or users.