On Sep, 7th, 2026 USE protocol liquidity pool and shortly DexyGold liquidity pool got drained by a hacker . This text provides details on the hack.
1. Preparation:
hacker’s address was funded from MEXC in transaction # f0d551d886072ce3c75da203c10b4c7a01f8ad6b6cb836e15f656d648fe50325
next, 3 tokens were minted in transactions f951a80e48ca86b1cdff2b471c12206c46e131df7ff03f43d99414af1c7bd2d4 , 94e9396a225d627f8609cbf35d93e5533ace01849156d58ec0faae6fdd6b5682 , and 7f18ca9595e380124989368030cce8f495e808702201e79ceafb6938beea3732
2 . The hack
Then the absence of LP input NFT check in expected position was used to simulate LP box to swap action, with LP box put in not expected position (LP contract also did not check its position).
Transaction: Ergo Explorer
3. Withdrawals
25,000 ERG were sent to MEXC exchange deposit address 9iEPmXmZKKeCYm4HjokqaUhEU8qmYHmb2deovYAMWjBZ28TNCq4 in transaction 471ead780bee74f3a3cc6bba1cf86f6ad175613d14834b029af2d0755db6b90a
180,000 ERG were sent to Kucoin deposit address 9fiLJGXB7WZi3LpLKn6ESDkwZr3PGuetaYWcJ8Av69aAzEYgr3y in c1fcfedb7f184af4c3c54e912343dee9d44ddf26d1725d2852786d914cc6ac66
then Dexy LP was emptied in the same way,
and 83118 ERG were sent to the same Kucoin deposit address in 59dbc1c54e7926234fec1ee50e850354ac91c3f739e9a5c4c1460991998e0a80
Next steps:
Currently , damage is being evaluated and the next steps considered