STRIKE0 / OFFENSIVE SECURITYAUTONOMOUS RED TEAMING / HUMAN-DIRECTED
PUBLIC INCIDENT DOSSIER / 6 OCT 2022
THEFT / GROSS EXPLOIT VALUE

BNB Chain
Security incident.

An exploit of the BSC Token Hub cross-chain bridge created approximately 2 million BNB, valued around USD 570 million at the time.

~$570M
VALUE MINTED IN EXPLOITUSD 570M represents gross BNB minted/exploited, not a confirmed net realized theft. The separate USD 100M outflow estimate must not be added to it.All incidents ↗
01 / DOCUMENTED FINDINGSPUBLIC-SOURCE ANALYSIS
WHAT HAPPENED

What the evidence shows.

The chain was temporarily halted and the majority of the exploited value remained subject to control or freezing. Contemporary reporting indicated around USD 100 million had moved off the chain, with estimates varying as tracing developed. The affected bridge was linked to the BNB Chain ecosystem, not Binance exchange hot wallets.

MEASUREMENT / INTERPRETATION

What the number means.

USD 570M represents gross BNB minted/exploited, not a confirmed net realized theft. The separate USD 100M outflow estimate must not be added to it.

CONTROL QUESTIONS

How to test resilience.

Bridge validation logic, proof verification, trust boundaries, transaction limits and emergency pause procedures.

Read cited source ↗
TURN LESSONS INTO VALIDATION

Find the path before an attacker does.

Discuss a scoped assessment ↗