An attacker drained roughly $7.3 million from more than 1,400 legacy liquidity-provider positions sitting in old DxSale locker contracts on BNB Chain, security firms PeckShield and Coinsult flagged on May 29 — a drain made possible not by a smart-contract bug but by a silent ownership transfer route