- Hackers gained access to BNB Chain’s official X handle late Tuesday night, posting malicious links on the handle through which they gained access to victims’ wallets.
- Over $13,000 was lost to the hack, according to the BNB Chain Team.
- The team says plans are ongoing to fully compensate victims of the scam.
- Crypto investors spited the attacker by pumping a token they dumped for $4k gain.
Hackers infiltrated the BNB Chain X Handle on Tuesday night, posting malicious links through which they were able to rip off victims of over $13k. For more than three hours, the hackers bombarded the page with phishing links, ultimately defrauding the unsuspecting crypto investors.
Attacker Stole $13k From BNB Chain Account Breach
Around 11:07 pm EST, Former Binance CEO CZ alerted followers that the X account was possibly compromised, while asking people not to click on any of the links posted from the account within that timeframe, while investigations were still ongoing.
According to those who saw the hacker’s posts on the page, they shared a link, inviting users to vote on a certain $BSC event with $BNB rewards for those who voted within the first 24 hours. Witnesses also said the hacker was shilling or advertising a coin on the account.
Within 25 minutes, CZ confirmed that the account was compromised. The former Binance boss asked people not to connect their wallets to the phishing websites, which were redirecting users to Wallet Connect.
The breach was reported to the X team to suspend the account temporarily before restoring access. The X Team also removed all phishing links from the account.
After a couple of hours, the BNB Chain account was finally restored, with the team having full access. However, the access point through which the hacker infiltrated the page has yet to be resolved.
“The root cause of this breach is still under active investigation and we will share the updates as soon as we can. The estimated damage is $8K and the victims will be compensated fully,” said BNB Team.
“In total, 10 phishing links were posted that resulted in $8K stolen across all chains. The biggest victim was from one single user at $6.5K.”
The estimate also captured a phishing contract address that the attacker initially funded with $17.8k, which they later rugged for $22k. That probably explains why CZ summed the total lost amount to $13k, where over $8k was lost to the phishing websites and $4.2k was profit from the rug pull.
Hacker Yet To Be Uncovered As Community Pumps Rugged Token
The BSC security teams appear to have gotten a linked KYC that could help uncover the face behind the scam. CZ condemned the breach, stating that the hacker could have “made more by building” instead of risking all the trouble they went through, “plus criminal liability.”
“Interestingly, after the hacker dumped ALL his tokens for a $4k gain,” noted CZ, “the community took over and bought the meme coin higher, as a mock to the hacker. Funniest come back by the community!”
Scams of this nature are not alien to the crypto space. Although the attacker carted away $13k, which is a tiny fraction compared to exchange scams, the proactive response of the BSC and X teams prevented its escalation, considering the account had over 3.8 million followers.
