Demex Shuts Down Permanently After September Bridge Exploit, Opens Fund Withdrawals by End of October

Published October 16, 2026, 01:42 PKT. Based on Demex's official announcement "Closing the Order Book", and coverage from AMBCrypto and CryptoPulseDaily.

Demex, the decentralized cross-chain derivatives exchange, will shut down permanently and will not reopen after the September 25 bridge exploit, the team said in a statement titled "Closing the Order Book" published on October 13, 2026. The team said it would top up the roughly $192,000 lost in the exploit and return user funds through an orderly withdrawal process.

The $192,000 bridge exploit that ended it

The announcement follows the September 25, 2026 bridge exploit, which drained approximately $192,000, according to the team. After exploring its options, the team concluded it could no longer operate the exchange safely. The post said running a decentralized exchange now demands a well-funded, fully staffed team able to defend continuously against new threats, noting that AI tools let attackers probe complex systems patiently and relentlessly while exploits across the space keep growing more frequent. AMBCrypto reported the shutdown news on October 15, 2026.

The timing lands amid a brutal year for crypto security. DeFiLlama data puts 2026 losses to hacks and scams at more than $1.195 billion, according to AMBCrypto, while TRM Labs counted a record 207 crypto hacks in the first half of 2026, more than double the 85 recorded in the first half of 2025.

Eight years, one sobering conclusion

The team traced the project back eight years, describing Demex as one of the first adopters of the now-ubiquitous Cosmos SDK stack and saying it had bet that a cross-chain "everything exchange" would be the final transformation of the space. The post acknowledged that Demex never found the traction it needed to keep going, while conceding that Hyperliquid has since shown the model works at scale.

What users get back, and how

Every account will be settled automatically using the balances and prices recorded at the moment the chain halted. Trading, lending and all other actions will stay disabled; withdrawal will be the only thing users can do. USDC positions will be topped up in the L1 smart contracts as needed so they can be withdrawn in full, though only the Arbitrum chain will be supported for withdrawals. Other tokens will be priced in dollars and returned as USDC to simplify bridging. Assets that no longer have backing, including ZIL and tokens from retired IBC chains, will be priced at zero and will require manual settlement with the team if any resolution becomes possible. Open perpetual positions will be closed at the halt price and paid out in USDC, open orders will be cancelled with locked funds returned to balances, and liquidity pool shares will be redeemed into their underlying tokens. On Nitron, outstanding debt will be cleared against collateral at its halt-time value, leftover deposits and collateral will be credited in USDC, and bad debts and shortfalls will be topped up.

The 30-day review and 90-day withdrawal clock

The withdrawal page goes live by the end of October, showing each user's balances before and after settlement with every change explained line by line. From that day, users get 30 days to review their settlement and dispute anything that looks wrong or unfair by emailing settlement@dem.exchange, with the team reviewing every claim and making manual adjustments where approved. Once the 30 days pass, the settlement is treated as accepted and users have 90 days to withdraw through the interface. After the 90-day window closes, the team says it can no longer provide support. The restored app will show only the withdrawal page, transactions will be gas-free, and IBC connections to Axelar will be restored during the review period.

DMX and nLEND become permanent on-chain records

DMX will have no withdrawal option. Instead, the team will credit the remaining 90% of the DMX airdrop to eligible accounts and issue an ERC-20 token on Ethereum recording each account's final DMX balance as a permanent, public record, planned to be non-transferable. nLEND, which now trades at about 0.09 of its original value of 1, will also be recorded as an ERC-20 on Ethereum, and holders will receive an additional DMX credit at a ratio the team has yet to confirm. The post stressed that none of these tokens are a promise of future value; they are records so future credit or rewards remain possible.

Goodwill refunds for recent DMX buyers

Users who bought DMX in the 90 days before the halt and were net buyers over that period will be refunded out of goodwill, since they bought expecting an exchange that would keep running. The refunds are handled manually by emailing refunds@dem.exchange with a Demex address, after which the team checks the account history and replies. The team said it will keep posting updates on X and Telegram until the final withdrawal window closes.

This article is news reporting and is not investment advice.

Sources

• Demex official blog, "Closing the Order Book", October 13, 2026, primary source for the shutdown decision, the roughly $192,000 bridge-exploit top-up, the halt-price settlement terms, the end-of-October withdrawal page timeline, the 30-day review and 90-day withdrawal windows, the DMX and nLEND ERC-20 records, and the goodwill refund program
• AMBCrypto, "Crypto's security crisis deepens - 3 exploits rattle the market in 24 hours", October 15, 2026, secondary source for the shutdown confirmation, the $192,000 loss figure, the withdrawal timeline, the DeFiLlama $1.195 billion 2026 hack total, and the TRM Labs 207-hacks first-half figure
• CryptoPulseDaily, "Crypto's security crisis deepens - 3 exploits rattle the market in 24 hours", October 15, 2026, secondary source confirming the shutdown details and withdrawal timeline