Crypto security firm SlowMist has linked more than 8,620 Solana wallets to the DEXX hacker, who exploited the memecoin trading platform on Nov. 16. Initially reported as a $21 million loss, SlowMist now estimates the total damage to be as high as $30 million, citing meme token price fluctuations as a contributing factor.

The attack, which affected at least 900 users, saw most victims losing under $10,000 each. However, one user suffered a devastating $1 million loss. This breach ranks as the second-largest crypto hack in November, following the $25.5 million Thala hack—though Thala successfully recovered all stolen funds.

The hacker reportedly converted stolen assets into Solana tokens. SlowMist plans to release additional wallet addresses linked to Ethereum, BNB Chain, and Base networks in the coming week as investigations continue.

In an attempt to recover the funds, DEXX has reached out to the hacker through blockchain messages and email, offering a bug bounty and token rewards for the return of assets. Despite these efforts, the hacker has remained unresponsive. Meanwhile, DEXX has partnered with SlowMist and law enforcement to track the stolen funds and improve platform security. The company has committed to compensating affected users, although the scope of reimbursement will depend on the amount recovered.

The hack contributes to a turbulent year for the crypto industry. Immunefi reports November losses at $71 million, pushing 2024’s total crypto hacks near $1.5 billion. Although this marks a 15% decline from 2023, phishing scams and other fraudulent activities continue to plague the industry, with $20.2 million lost in October alone.