DEXX Starts User Compensation and Restarts After $21 Million Key Leak

DEXX began compensating users and restarted its on-chain trading terminal on February 8, 2025, nearly three months after a private-key compromise exposed customer assets across multiple blockchains. A corporate announcement distributed for LBank said a coalition had organized a $15 million recovery initiative and that compensation started alongside it.

The restart mattered because it tested whether a crypto trading service could restore operations while its users were still carrying losses from a serious custody failure. It also shifted the DEXX response from promises and claims processing into actual reimbursements, although the surviving public record did not provide a complete transaction ledger or an independently audited total paid on February 8.

From private-key failure to compensation

The breach occurred on November 16, 2024. SlowMist’s incident archive classified the attack method as private-key leakage and recorded an estimated loss of $21 million. That figure is a security-firm estimate rather than a settled accounting total: DEXX users held volatile tokens, so later reports produced different dollar values as token prices changed and more affected addresses were identified.

DEXX had already taken preliminary recovery steps before the restart. According to the February 8 coalition announcement, the platform opened a dedicated compensation portal on December 14, 2024, after saying on December 6 that 80% of daily platform revenue would be directed toward compensation. An NFT-staking portal opened on February 5, requiring affected users to complete an additional step before participating in the payment process.

Those mechanics deserve scrutiny. The NFT did not itself restore stolen assets; it functioned as a claim or participation instrument within a platform-controlled reimbursement system. Eligibility, payment order and the value assigned to individual losses therefore depended on DEXX’s records and procedures rather than a permissionless protocol automatically returning funds.

A $15 million industry initiative

LBank’s announcement identified MEXC Ventures, HashKey Capital, SevenX Ventures and Mask Network among the organizations joining the recovery effort. It said the $15 million initiative would be used exclusively to compensate affected DEXX users. LBank and MEXC Ventures also announced a Meme Prosperity Committee intended to oversee allocation.

The announcement did not provide bank records, on-chain funding addresses, individual contribution amounts or a payment schedule dividing the $15 million among claimants. Accordingly, the figure should be read as the coalition’s contemporaneous representation of the initiative, not as independently verified cash already disbursed on February 8.

The episode also exposed an important distinction in products marketed as on-chain. Trading and settlement may interact with public blockchains while key management, account recovery and compensation remain dependent on a centralized operator. In DEXX’s case, SlowMist attributed the loss to leaked private keys rather than a defect in a publicly deployed smart contract. The restart therefore could not, by itself, establish that the operational weakness responsible for the breach had been eliminated.

What was known on February 8

By February 8, the verifiable development was that DEXX had resumed service and said compensation was underway, supported by a newly announced industry recovery pool. It was not yet possible to verify how many users had been made whole, what percentage of aggregate losses had been covered or whether the entire $15 million commitment had been funded.

Later confirmation

On February 17, 2025, DEXX said users meeting its wallet and staking requirements with claims of 5,000 USDT-equivalent or less had been compensated during February 8–14, while payments for the next claim band had begun. That later statement supports the conclusion that distributions occurred, but it remains a company-reported progress update rather than a complete independent audit.