[The Exiled]

Explained: How $600M was stolen from Binance’s BNB chain

On Thursday, Binance’s BSC Token Hub was hacked for two million BNB, its native cryptocurrency, worth approximately $586 million at the time of the incident. However, the attacker only managed to bridge a fraction of the loot to other chains before validators halted the network, blocking access to the $430 million remaining in the hacker’s BNB chain address. The chain has since been reactivated. Data from the DeBank portfolio tracker shows the hacker had access to approximately $110 million in various cryptocurrencies across Ethereum, Avalanche, and Fantom networks, as well as L2s Arbitrum and Optimism. However, of this, an estimated $6.5 million in USDT has been frozen by Tether, the stablecoin’s issuer.

The attacked Token Hub is essentially a bridge allowing BNB to be sent to their smart contract blockchain, BNB Chain. The network, formerly known as Binance Smart Chain, is Binance’s DeFi ecosystem and the 3rd largest DeFi blockchain by Total Value Locked (TVL). In order to pull off the heist, the hacker sent falsified transactions which convinced the bridge’s code they had previously deposited two million BNB to the bridge, and that they were eligible to withdraw it again. The two withdrawals of one million BNB each were made just over two hours apart, minting the funds directly into the attacker’s address.

Izvor: Protos