PANews reported on November 20th that GoPlus issued a security alert: Users who received the DMT token airdrop from @dexmaxai are urged to immediately cancel authorization or transfer their assets to a secure wallet. Multiple users reported being scammed today, claiming they were tricked into authorizing other tokens when receiving the DMT airdrop. This has resulted in the theft of assets from thousands of users and the cross-chain transfer of over $130,000. The official @dexmaxai Twitter account and website have removed RUG from their platform.

The investigation revealed that when users claimed the airdrop, the attackers tricked them into signing again to obtain authorization, and then transferred the authorized assets. After stealing the funds, the attackers used a cross-chain bridge to transfer the assets to ETH. Most of the stolen funds have flowed into HitBTC, while a small portion remains on the blockchain.