Hackers Stole More Than $5M From 2 Binance Chain Apps

Binance CEO Changpeng Zhao said his exchange would be freezing withdrawals related to the recent hack

article-image

Source: Dall-E

share

Ankr, a decentralized finance (DeFi) protocol on the BNB chain, has been hit with a $5 million exploit.

The hack occurred earlier Friday morning after the attacker took advantage of an unlimited mint bug in the aBNBc token smart contract, a bug that the attacker reportedly engineered.

A total of 10 trillion aBNBc was minted and later swapped by the attacker for 4,050,500 USDC and 5,000 BNB tokens. All USDC was then moved from the Binance Smart Chain onto Ethereum and funneled through crypto mixer Tornado Cash

Loading Tweet..

Binance CEO Changpeng Zhao said his exchange would be freezing withdrawals related to the recent hack.

“Initial analysis is developer private key was hacked, and the hacker updated the smart contract to a more malicious one,” Zhao tweeted. “Binance paused withdrawals a few hours ago. Also froze about $3m that hackers move to our CEX.”

Liquidity pools of aBNBc on PancakeSwap and ApeSwap have almost been completely drained by the hack, and as a result, the price of aBNBc has dipped by 99.5% over the past 24 hours — the price of Ankr’s native cryptocurrency, ANKR, has also been affected, dropping by 2.5% in the past day.

Ankr’s team is actively looking at resolving its smart contract issues and will be reimbursing users affected by the hack.

Loading Tweet..

“Ankr will purchase 5m worth of BNB and use this to compensate in totality the liquidity providers that have been affected by the exploit due to the drainage of the liquidity pool,” the company tweeted

Adding, “the ankrBNB token will continue to be redeemable, while aBNBc and aBNBb will no longer be redeemable.”

The Ankr team put out a damage assessment Friday afternoon ET, detailing the next steps for holders of the affected tokens.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Tags

Upcoming Events

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Screen Shot 2024-05-16 at 14.53.45.png

Research

Loss-versus-rebalancing (LVR) is arguably Ethereum DeFi’s biggest problem, and thus reducing LVR is fundamental to the success of Ethereum. This report dives into the world of LVR. We uncover its importance for AMM designers, discuss the two major mechanism design categories and various projects developing solutions, and offer a higher level perspective on the importance of AMMs in general.

article-image

Yesterday saw Congress’ upper chamber side with the House on a measure aimed at overturning SAB 121

article-image

Oklahoma’s new crypto bill will go into effect in November of this year

article-image

The deposits hit a $20 million cap in just 45 minutes

article-image

Twelve Democratic Senators voted in favor to pass the resolution Thursday

article-image

Pump.fun is “aware” that bonding curve contracts on Pump.fun were exploited, and has since paused trading

article-image

Some investment pros are mulling crypto allocations between 1% and 10% and seeking ex-BTC exposure for interested clients