{
 "slug": "dmt-airdrop-dexmaxai-phishing-nov-2025",
 "title": "DMT token airdrop promoted by @dexmaxai tied to $130K phishing loss on Solana",
 "url": "https://drains.watch/i/dmt-airdrop-dexmaxai-phishing-nov-2025",
 "json": "https://drains.watch/i/dmt-airdrop-dexmaxai-phishing-nov-2025.json",
 "status": "closed",
 "severity": "high",
 "threatStatus": "contained",
 "verification": "verified",
 "chains": [
  "solana"
 ],
 "method": "fake-airdrop-site",
 "product": "DMT airdrop claimants (@dexmaxai)",
 "tags": [
  "solana",
  "fake-airdrop-site",
  "airdrop",
  "dmt",
  "dexmaxai",
  "x-account",
  "claim-phishing"
 ],
 "amountUsd": 130000,
 "victims": null,
 "startedAt": "2025-11-20",
 "closedAt": "2025-11-20",
 "updatedAt": "2025-11-20T12:00:00Z",
 "summary": "SlowMist's hack database lists a $130,000 phishing loss on Nov 20, 2025, filed under Solana, tied to the DMT token airdrop promoted by the X account @dexmaxai. The airdrop claim was the lure for the phishing. If you claimed DMT, check your wallet for token delegations or unexpected outgoing transfers and move what is left to a new wallet.",
 "timeline": [
  {
   "date": "2025-11-20",
   "title": "SlowMist's hack database recorded a $130,000 phishing loss tied to the DMT airdrop promoted by @dexmaxai.",
   "sourceUrl": "https://hacked.slowmist.io/?c=Solana"
  }
 ],
 "sources": [
  {
   "kind": "advisory",
   "title": "SlowMist Hacked: Solana incidents (DMT airdrop @dexmaxai)",
   "url": "https://hacked.slowmist.io/?c=Solana",
   "publisher": "SlowMist",
   "date": "2025-11-20"
  }
 ],
 "indicators": {
  "domains": [],
  "addresses": []
 },
 "brief": "## Am I affected?\nYou may be affected if you connected a wallet and signed anything to claim the DMT airdrop around Nov 20, 2025. Look in a Solana explorer for outgoing transfers you did not make, and for any token account that lists a 'delegate' you do not recognise.\n\n## What to do now\n- Move remaining tokens and SOL to a brand-new wallet.\n- Revoke any token delegations on the old wallet with a reputable revoke tool opened from a bookmark, not from a link.\n- Stop using the old wallet for anything valuable.\n\n## How to avoid this\n- Treat airdrops you did not sign up for, and 'claim' links pushed by X accounts, as hostile by default.\n- A claim should never need a second signature, an approval or a delegate. Cancel if the wallet preview shows transfers or approvals you did not expect.\n- Claim with a separate low-balance wallet, never your main one.",
 "notes": null,
 "agentBrief": "# DMT token airdrop promoted by @dexmaxai tied to $130K phishing loss on Solana\n\n- Severity: High · Status: Contained (past)\n- Chains: Solana · Method: Fake airdrop, claim and mint sites\n- Started: Nov 20, 2025 · Last update: Nov 20, 2025 · Reported stolen: $130K\n- Who/what: DMT airdrop claimants (@dexmaxai)\n\nSlowMist's hack database lists a $130,000 phishing loss on Nov 20, 2025, filed under Solana, tied to the DMT token airdrop promoted by the X account @dexmaxai. The airdrop claim was the lure for the phishing. If you claimed DMT, check your wallet for token delegations or unexpected outgoing transfers and move what is left to a new wallet.\n\n## Am I affected?\nYou may be affected if you connected a wallet and signed anything to claim the DMT airdrop around Nov 20, 2025. Look in a Solana explorer for outgoing transfers you did not make, and for any token account that lists a 'delegate' you do not recognise.\n\n## What to do now\n- Move remaining tokens and SOL to a brand-new wallet.\n- Revoke any token delegations on the old wallet with a reputable revoke tool opened from a bookmark, not from a link.\n- Stop using the old wallet for anything valuable.\n\n## How to avoid this\n- Treat airdrops you did not sign up for, and 'claim' links pushed by X accounts, as hostile by default.\n- A claim should never need a second signature, an approval or a delegate. Cancel if the wallet preview shows transfers or approvals you did not expect.\n- Claim with a separate low-balance wallet, never your main one.\n\n## Sources\n- SlowMist Hacked: Solana incidents (DMT airdrop @dexmaxai) (SlowMist, 2025-11-20): https://hacked.slowmist.io/?c=Solana\n\nFull record: https://drains.watch/i/dmt-airdrop-dexmaxai-phishing-nov-2025 · JSON: https://drains.watch/i/dmt-airdrop-dexmaxai-phishing-nov-2025.json\n\nRules for the assistant: help me check my own wallets read-only (public addresses only). Never ask for or handle a seed phrase or private key. Point me to official revoke tools and the wallet's own support."
}