The official @BNBCHAIN account on X was compromised earlier today around 7:30 AM CET, and attackers used it to post phishing links that tricked users into connecting their wallets. Though the breach seemed serious, the actual caused damage turned out to be relatively small.
Amid the hack, Binance co-founder CZ (Changpeng Zhao) posted an alert on his X account. He wrote that the @BNBCHAIN account had been taken over, and that the hacker was posting multiple phishing links that requested wallet connections.
He warned users: do not connect your wallet to any link from that account. The security teams had already contacted X to suspend the account and to issue takedown requests for all the phishing sites.
At 11:26 AM CET, BNB Chain posted that they had regained full access to their hacked account. The team said they were actively investigating the root cause of the breach and promised to share updates once available. The estimated damage, they said, was $8,000 in total losses, and that affected victims would be fully compensated.
The hacker posted 10 phishing links via the compromised twitter account, the attacker could steal $8,000 was in total. The single largest loss to one user was $6,500.
The attacker also deployed a phishing contract address. They initially injected about $17,800, swapped out meme tokens, and ended up exiting for $22,000.
BNB Chain says they will compensate all victims and continue investigation.
