Cryptocurrency [loss] $5M+

Tweet by Ankr

2022-12-01 [vendor] Ankr [chain] bsc
Primary Source ↗
Financial Loss $5.0M (5,000,000 USD)
Blockchain(s) Bsc

Incident Details

The BNB Chain-based Ankr defi protocol suffered an exploit of their aBNBc token. “We are currently working with exchanges to immediately halt trading,” they wrote. However, the attacker had already bridged and tumbled around $5 million in funds from the exploit before the announcement was even made.The attacker, and possible subsequent copycat attackers, used a vulnerability in the project smart contract to mint quadrillions of aBNBc, which they then swapped to various other tokens.Binance halted trading on aBNBc tokens, as well as on HAY tokens, a stablecoin project that was subsequently exploited. Ankr also tweeted that “We have been in touch with the [decentralized exchanges] and told them to block trading”, although decentralized exchanges are typically not supposed to be able to “block trading”.Ankr later blamed the hack on an employee, who they say had inserted malicious code into the protocol that was used to exfiltrate the private key.

Total loss estimated at $5,000,000.

Technical Details

Initial Attack Vector
Malicious code injection / supply chain
Vendor / Product
Ankr

Timeline

  1. 2022-12-01 Breach occurred
  2. 2022-12-01 Publicly disclosed