Binance says 2M BNB, worth ~$570M, were stolen from its BNB Chain in an exploit; “majority” of BNB are in the hacker's wallet, ~$100M worth were “unrecovered”

Hackers have stolen around $100 million worth of cryptocurrency from a Binance-linked blockchain …

Reuters 2022-10-07 Elizabeth Howcroft

Context & Ripple Effects

Binance had previously handled a 2019 theft of customer bitcoin by saying its user-protection fund would cover losses. The BNB Chain incident shifts the security question from exchange-account access to the infrastructure tied to Binance's own token.

The reported unrecovered balance mattered beyond the initial incident: later coverage described an address tied to the exploit using BNB as collateral before a $63M liquidation on Venus Protocol.

First-order effects

Binance and BNB Chain must pursue recovery and containment for the attacker-controlled BNB, while roughly $100M of the reported loss remains outside recovery.
BNB holders and applications using BNB face exposure to tokens controlled by the exploiter rather than a loss confined to individual Binance customer accounts.

Second-order effects

Lending platforms that accept BNB collateral must monitor addresses connected to the exploit; the later Venus liquidation shows how stolen tokens can reach adjacent DeFi markets.
Binance's earlier use of a protection fund after its 2019 exchange breach creates a sharper distinction between covering customer losses and managing a compromise affecting the BNB Chain ecosystem.

Third-order effects

Repeated security incidents spanning exchange accounts and chain infrastructure put greater weight on the controls governing token movement across Binance-linked systems.
As compromised tokens can be pledged in DeFi before recovery, crypto risk management increasingly depends on coordination between chains, exchanges, and lending protocols.

The trend: Crypto-security risk is moving from isolated exchange breaches toward ecosystem-wide exposure when compromised assets can circulate through interconnected on-chain finance.

Discussion

@bnbchain @bnbchain on x
Due to irregular activity we're temporarily pausing BSC. We apologize for the inconvenience and will provide further updates here. Thank you for your patience and understanding.
@cz_binance @cz_binance on x
An exploit on a cross-chain bridge, BSC Token Hub, resulted in extra BNB. We have asked all validators to temporarily suspend BSC. The issue is contained now. Your funds are safe. We apologize for the inconvenience and will provide further updates accordingly.
@samczsun @samczsun on x
Five hours ago, an attacker stole 2 million BNB (~$566M USD) from the Binance Bridge. During that time, I've been working closely with multiple parties to triage and resolve this issue. Here's how it all went down. https://twitter.com/...
@0xfoobar @0xfoobar on x
somebody on BNB just got hacked for ~2 million BNB ($600 million USD) the attacker is spewing funds across liquidity pools and utilizing every bridge they can to get to safer chains complete chaos on the chain
@bnbchain @bnbchain on x
Initial estimates for funds taken off BSC are between $70M - $80M. However, thanks to the community and our internal and external security partners, an estimated $7M has already been frozen 1/2
@henryfarrell Henry Farrell on x
The most amazing thing to me about these stories is how routinized they are, and how little attention they get outside the specialist community. https://twitter.com/...
@ercwl Eric Wall X on x
This is a giant comms fuckup. Later in the thread they mention the other validators that were involved, and in later tweets they say: “We request BSC Validators to get in touch with us within the next few hours so that we can plan a node upgrade!” Instead of “we did this” https:/…
@cryptokaleo @cryptokaleo on x
Anyone surprised by this shouldn't be. BNB / BSC has always been centralized “DeFi”. Centralized entities can have streamlined efficiency, lower fees, and can shut off when you need them to. The trade off is the case for immutability / censorship resistant transactions. https://t…
@granitacademy @granitacademy on x
You guys have full support from our side. Mistakes happen, what's important is quick recovery. Glad that you can react fast and fix the problem. https://twitter.com/...
@bowtiedbull @bowtiedbull on x
Sigh. Same thing. No one cares to listen though. All exchanges are honey pots https://twitter.com/...
@tante @tante on x
The future of finance https://twitter.com/...
@stacyherbert Stacy Herbert on x
Imagine if a nation had any critical infrastructure on this 💩⛓ https://twitter.com/...
@kurtwuckertjr @kurtwuckertjr on x
If the world ran on a scalable proof of work blockchain, there wouldn't be a need for bridges. Instead, BSC is a copypasta of Ethereum with all the security problems of a global state machine. As they absorb more value, they will be hacked more because they're trash honeypots. ht…
@cryptoworldjosh Josh on x
I have huge respect for @cz_binance, but if you can easily & quickly “pause” a blockchain, it's centralised & vulnerable to government bans. #Bitcoin for example could never be “paused” this easily or quickly. https://twitter.com/...

Chronicles