{"id":1218342,"date":"2022-10-07T13:42:07","date_gmt":"2022-10-07T13:42:07","guid":{"rendered":"https:\/\/www.ghanamma.com\/2022\/10\/07\/binance-hit-by-100-million-blockchain-bridge-hack\/"},"modified":"2022-10-07T13:42:07","modified_gmt":"2022-10-07T13:42:07","slug":"binance-hit-by-100-million-blockchain-bridge-hack","status":"publish","type":"post","link":"https:\/\/www.ghanamma.com\/2022\/10\/07\/binance-hit-by-100-million-blockchain-bridge-hack\/","title":{"rendered":"Binance hit by $100 million blockchain bridge hack \u2022"},"content":{"rendered":"<p><\/p>\n<div>\n<p id=\"speakable-summary\">Binance, the world\u2019s largest cryptocurrency exchange, confirmed Thursday that hackers made off with at least $100 million, but that the figure could have been significantly more.<\/p>\n<p>The Binance blockchain, also known as BNB Chain and Binance Smart Chain, took the rare step of suspending transactions and fund transfers after discovering a vulnerability affecting the BSC Token Hub cross-chain bridge. These bridges are designed to facilitate the transfer of assets from one independent blockchain to another.<\/p>\n<p>The vulnerability in the BSC Token Hub bridge allowed the attacker to forge messages, enabling them to mint new BNB tokens. Since the stolen tokens were not pre-existing tokens taken from wallets, no user funds were impacted.<\/p>\n<p>In a blog post on Friday, the BNB Chain team said that a total of 2 million BNB \u2014 worth approximately $568 million \u2014 were initially withdrawn by the hacker. But blockchain security company <a href=\"https:\/\/twitter.com\/SlowMist_Team\/status\/1578220472373649408\">SlowMist<\/a> says the attacker only managed to take about $110 million because the majority of the stolen tokens, worth about $430 million, couldn\u2019t be transferred following the suspension of the BNB Chain.<\/p>\n<p>Binance chief executive Changpeng Zhao <a href=\"https:\/\/twitter.com\/cz_binance\/status\/1578171072067031042\">said in a tweet<\/a> that the company estimates the impact of the breach to be between $100 million and $110 million.<\/p>\n<p>\u201cThe issue is contained now. Your funds are safe. We apologize for the inconvenience and will provide further updates accordingly,\u201d said Zhao.<\/p>\n<p>When approached for comment, Binance spokesperson Ismael Garcia declined to comment beyond the blog posted by the BNB Chain team, which says that the BNB Chain is now back up and running. The blog post adds that a new on-chain governance mechanism will be introduced on the BNB Chain to fight and defend against future possible attacks.<\/p>\n<p>\u201cThe bug itself lies in how Binance Bridge processes the proofs of transactions sending the money from one chain to another,\u201d Adrian Hetman, tech lead of the Triaging Team at Immunefi, a web3 bug bounty program provider, told . \u201cThe logic checks the message proof, something a user submits, and proceeds with the payout if the proof is valid.\u201d<\/p>\n<p>\u201cThe hacker managed to forge such a message that it tricked the logic of the contract into thinking the message was indeed valid, even though the hacker didn\u2019t have valid claims to the funds. BSC Token Hub then proceeded with the payout as everything was valid,\u201d said Hetman.<\/p>\n<p>Cross-chain bridge hacks have become a common occurrence in the past year. In June, a hacker exploited a vulnerability to steal $100 million from Harmony\u2019s Horizon Bridge, and in August,\u00a0attackers drained $190m worth of crypto from the Nomad cross-chain bridge.\u00a0So far this year, about $2 billion in cryptocurrency has been stolen in cross-chain bridge hacks, according to blockchain data firm Chainalysis.<\/p>\n<p>Earlier this year, hackers stole $625 million\u00a0following the attack on Axie Infinity\u2019s Ronin Bridge in March.<\/p>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Binance, the world\u2019s largest cryptocurrency exchange, confirmed Thursday that hackers made off with at least $100 million, but that the figure could have been significantly more. The Binance blockchain, also known as BNB Chain and Binance Smart Chain, took the rare step of suspending transactions and fund transfers after discovering a vulnerability affecting the BSC [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1218344,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[],"class_list":["post-1218342","post","type-post","status-publish","format-standard","has-post-thumbnail","category-celebrity-gossip"],"_links":{"self":[{"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/posts\/1218342","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/comments?post=1218342"}],"version-history":[{"count":0,"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/posts\/1218342\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/media?parent=1218342"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/categories?post=1218342"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ghanamma.com\/2022\/wp-json\/wp\/v2\/tags?post=1218342"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}