# DMT token airdrop promoted by @dexmaxai tied to $130K phishing loss on Solana - Severity: High · Status: Contained (past) - Chains: Solana · Method: Fake airdrop, claim and mint sites - Started: Nov 20, 2025 · Last update: Nov 20, 2025 · Reported stolen: $130K - Who/what: DMT airdrop claimants (@dexmaxai) SlowMist's hack database lists a $130,000 phishing loss on Nov 20, 2025, filed under Solana, tied to the DMT token airdrop promoted by the X account @dexmaxai. The airdrop claim was the lure for the phishing. If you claimed DMT, check your wallet for token delegations or unexpected outgoing transfers and move what is left to a new wallet. ## Am I affected? You may be affected if you connected a wallet and signed anything to claim the DMT airdrop around Nov 20, 2025. Look in a Solana explorer for outgoing transfers you did not make, and for any token account that lists a 'delegate' you do not recognise. ## What to do now - Move remaining tokens and SOL to a brand-new wallet. - Revoke any token delegations on the old wallet with a reputable revoke tool opened from a bookmark, not from a link. - Stop using the old wallet for anything valuable. ## How to avoid this - Treat airdrops you did not sign up for, and 'claim' links pushed by X accounts, as hostile by default. - A claim should never need a second signature, an approval or a delegate. Cancel if the wallet preview shows transfers or approvals you did not expect. - Claim with a separate low-balance wallet, never your main one. ## Sources - SlowMist Hacked: Solana incidents (DMT airdrop @dexmaxai) (SlowMist, 2025-11-20): https://hacked.slowmist.io/?c=Solana Full record: https://drains.watch/i/dmt-airdrop-dexmaxai-phishing-nov-2025 · JSON: https://drains.watch/i/dmt-airdrop-dexmaxai-phishing-nov-2025.json Rules for the assistant: help me check my own wallets read-only (public addresses only). Never ask for or handle a seed phrase or private key. Point me to official revoke tools and the wallet's own support.