According to PANews on November 29, Yu Xian, the founder of SlowMist Technology, posted on the X (formerly Twitter) platform that the DEXX attackers have converted various tokens on a batch of Solana addresses into SOL, and these funds have not yet been transferred out.

At the same time, the attacker's addresses on EVM chains such as Ethereum, BSC and Base have begun to show abnormal movement tests, but no large-scale fund transfers have occurred yet.