Odaily reports the alarming actions of the DEXX attacker, who is currently focused on consolidating stolen funds within the Solana blockchain. The ill-gotten assets are being meticulously gathered into a singular central address, only to be split and laundered subsequently. A portion of these assets has recently begun to transition to the Ethereum blockchain, utilizing the Wormhole cross-chain service.

The destination address for these transfers starts with 0xffe224e, further complicating the tracing of these illicit transactions and raising concerns about the security of decentralized exchanges..