PeckShield: a wallet tied to the ~$600M Binance Coin hack in October 2022 had $63M liquidated on lending platform Venus Protocol, after using BNB as collateral
Cryptocurrencies' sudden tumble this week flushed out legions of speculators — and also, judging from blockchain data, the perpetrator of a giant hack.
Context & Ripple Effects
The liquidation traces back to the 2022 BNB Chain exploit that Binance said involved 2M BNB, much of which remained associated with the attacker’s wallet. It shows that assets linked to a major security breach were still being deployed in on-chain finance rather than simply sitting idle.
PeckShield’s attribution is based on blockchain data, so the event also illustrates how public ledgers can expose the financial consequences of addresses tied to past exploits.
First-order effects
- The wallet’s BNB-backed borrowing position on Venus Protocol was liquidated for $63M, closing its leveraged exposure as collateral values fell.
- Venus Protocol’s liquidation mechanism moved to resolve the position; the hack-linked wallet loses control of collateral subject to that process.
Second-order effects
- The episode makes the risk of accepting volatile tokens as lending collateral more visible to DeFi users and protocols, especially when collateral is associated with a widely tracked exploit.
- On-chain investigators gain a concrete transaction trail from the earlier BNB theft into a lending protocol, potentially making subsequent movements of the affected assets easier to scrutinize.
Third-order effects
- If exploit-linked assets continue to circulate through open lending markets, DeFi risk management may increasingly have to address provenance alongside price volatility and collateral ratios.
- The broader tension is that transparent blockchains aid tracing, while permissionless protocols can still provide immediate financial utility to addresses associated with illicit activity.
The trend: This is one data point in the growing collision between permissionless DeFi liquidity, volatile collateral, and the traceability of funds tied to crypto exploits.