Back to dashboard
Thursday, October 6, 2022 at 21:00 UTC

BNB Chain Bridge

IAVL proof forgery; validators paused chain to stop attacker.

Partial
Funds stolen
$570.00M
Recovered
$430.00M75%
Still outstanding
$140.00M
Chain
BNB Chain
Category
Bridge
Attack vector
Bridge Exploit
Reported by
CertiK
Incident ID
h2022-6

Exploit & recovery timeline

  1. Oct 6, 2022 · 19:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the bridge exploit exploit against BNB Chain Bridge.

  2. Oct 6, 2022 · 21:00 UTC
    Exploit executed

    $570.0M drained from BNB Chain Bridge on BNB Chain via Bridge Exploit.

  3. Oct 6, 2022 · 22:00 UTC
    Detected by CertiK

    CertiK flagged the anomalous transactions and published an initial alert.

  4. Oct 7, 2022 · 01:00 UTC
    Protocol response

    BNB Chain Bridge paused affected contracts or withdrawals and began tracing outbound flows.

  5. Oct 7, 2022 · 21:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Oct 13, 2022 · 21:00 UTC
    Partial recovery

    $430.0M of $570.0M recovered (75%); the remainder is still unaccounted for.

  7. Nov 5, 2022 · 21:00 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.