On October 1, the official X (formerly Twitter) account of BNB Chain was compromised by an unknown attacker. The breach lasted several hours and was used to share phishing links disguised as promotions for a new memecoin and airdrop campaign. These links redirected users to fraudulent websites designed to extract wallet credentials through Wallet Connect prompts.
The BNB Chain team confirmed that ten phishing links were posted from the compromised account, leading to the theft of approximately $8,000 worth of crypto assets. The largest individual loss came from a single user who lost $6.5K.
Binance founder and BNB Chain figurehead CZ also stated that the attacker deployed a phishing smart contract, injected $17.8K into a memecoin, and exited with $22K – profiting an additional $4.2K from that action. In total, the attacker earned roughly $13K.
Read also: Hacker Steals $908K in Delayed USDC Wallet Scam
Security Response and Account Recovery
Shortly after the attack began, CZ alerted the community, warning users not to click on any recent links from the @BNBChain X account. Binance’s internal security team contacted X, initiated takedown requests for the phishing domains, and began the process of suspending and recovering the compromised account. Within a few hours, the account was fully restored.
Both CZ and the BNB Chain team have stated that the victims affected by the phishing links will be fully reimbursed. The hacker’s identity remains unknown, although there is speculation that KYC data connected to the phishing activity may aid in identifying the individual responsible.
Read also: From a Zip File to Catastrophe: Radiant’s $50M Hack Explained
No Impact on BNB Token or Chain
Despite the social media breach, the BNB token remained stable and showed a 2.5% price increase on the day of the incident, trading above $1,030 and close to its recent all-time high. There were no reported vulnerabilities in the BNB Chain network itself, and blockchain operations remained unaffected throughout the event.
The incident is limited to a single social media account and did not involve the blockchain infrastructure or smart contracts.
Read also: “From $0.10 to $1000” – CZ Reflects as BNB Hits Historic Milestone
Ongoing Investigation and Warnings
BNB Chain has stated that the root cause of the breach is still under investigation and that further updates will be provided when available. In the meantime, the team has reiterated the importance of verifying all links, even those coming from verified accounts, and advised users to stay alert against phishing attempts.
We’ve released a full guide to recognizing presale scams!
It covers how these schemes work, how they trap investors – and how to spot the red flags. Check it out here!
