Chat with us, powered by LiveChat

Binance Had 2 Million BNB Tokens Stolen in Major Crypto Hack

Derek Wolfe

Updated: October 13, 2022

binance bnb hack
Editor’s Note:

EDITOR'S NOTE: The “blockchain” itself may be impenetrable but everything outside of it, meaning individual cryptos, wallets holding cryptos, and other components of any given crypto ecosystem are not. There was another $570 million crypto hack (this time, a Binance bnb coin hack) in which people foolish enough to invest in them lost their money. It’s amazing how far investors will go to find a fashionable safe haven or a speculative asset (which one is crypto anyway?) when a much more time-tested and historically-supported asset class like precious metals is available. None of them are digitally-hackable; none can simply “disappear,” as all are tangible. As the saying goes, not all that glitters is gold.

KEY POINTS
  • Binance said a cross-chain bridge linking with its BNB Chain was targeted, enabling a hack that moved BNB tokens off the network.
  • In total, hackers withdrew 2 million BNB tokens — about $570 million at current prices — from BNB Chain said in a blog post on Friday.
  • An earlier estimate from the company placed the total amount withdrawn in a range of $100 million to $110 million.
  • The value of BNB sank more than 3% Friday morning to $285.36 a coin, according to CoinMarketCap data.

Cryptocurrency exchange Binance temporarily suspended its blockchain network after hackers made off with around $570 million worth of its BNB token.

Binance said late Thursday a cross-chain bridge linking with its BNB Chain was targeted, enabling hackers to move BNB tokens off the network. So-called cross-chain bridges are tools that allow the transfer of tokens from one blockchain to another.

The company said it had worked with network validators — entities or individuals who confirm transactions on the blockchain — to pause creation of new blocks on BSC, suspending all transaction processing while a team of developers investigates the breach.

Binance is the world’s largest crypto exchange by trading volume.

“An exploit on a cross-chain bridge, BSC Token Hub, resulted in extra BNB. We have asked all validators to temporarily suspend BSC,” Changpeng Zhao, Binance’s CEO, said in a tweet Thursday evening.

“The issue is contained now. Your funds are safe. We apologize for the inconvenience and will provide further updates accordingly.”

BNB Chain has since resumed operations.

In total, hackers drained 2 million BNB tokens — about $570 million at current prices — from the network, Binance’s BNB Chain said in a blog post on Friday.

The hack was caused by a bug in the bridge’s smart contract that allowed hackers to forge transactions and send money back to their crypto wallet, according to crypto security firm Immunefi. Smart contracts are pieces of code on the blockchain that allow agreements to execute automatically without human intervention.

“As with many bridge designs, there is one central point that holds most of the funds that are moving through the bridge,” Adrian Hetman, tech lead of the triaging team at Immunefi, told CNBC.

“Ultimately, the Bridge was tricked into giving funds from that contract.”

The value of BNB sank more than 3% Friday morning to $285.36 a coin, according to CoinMarketCap data.

An earlier estimate from the company placed the total amount withdrawn in a range of $100 million to $110 million. The company also said it managed to freeze $7 million of funds with the help of its security partners.

A Binance spokesperson told CNBC the company coordinated with BNB Chain validators to enact an upgrade. That meant that most of the funds remained in the exploiter’s crypto wallet, while about $100 million was “unrecovered.”

BNB Chain has 26 active validators at present and 44 in total in different time zones, the spokesperson added.

BNB Chain, originally known as Binance Chain, was first developed by Binance in 2019. Like other blockchains, it features a native token, called BNB, that can be traded or used in games and other applications.

It is the latest in a series of major hacks targeting cross-chain bridges, with instances of sloppy engineering making them a prime target for cybercriminals.

A total of around $1.4 billion has been lost to breaches on cross-chain bridges since the start of 2022, according to data from blockchain analytics firm Chainalysis.

The crypto industry has had a rough year, with roughly $2 trillion in value being erased since the peak of a blistering rally from 2020 to 2021. The implosion of $60 billion blockchain venture Terra and a worsening macroeconomic environment have severely impacted market sentiment.

Originally published on CNBC.

No Investment Advice

GSI Exchange is a publisher and precious metals retailer. You understand and agree that no content published on the Site constitutes a recommendation that any particular security, portfolio of securities, transaction, or investment strategy is suitable or advisable for any specific person. You understand that the Content on the Site is provided for information purposes only, and none of the information contained on the Site constitutes an offer, solicitation or recommendation to buy or sell a security. You understand that the GSI Exchange receives neither monetary or securities compensation for our services. GSI stands to benefit from the sell of retail cost precious metals on this site. To avoid hidden costs all prices are listed live 24/7 on this site. Read the full disclaimer

2022 Info Kit

GET YOUR FREE

GOLD SILVER INFO KIT

Precious Metals and Currency Data Powered by nFusion Solutions