An attacker stole approximately $3.1 million from the BNB chain-based GANA Payment project. The thief laundered about $1 million of the stolen funds through Tornado Cash shortly after. The attacker was able transfer ownership of the GANA contract to themselves, possibly after a private key leak.The theft was first observed by crypto sleuth zachxbt. Not long after, the project acknowledged on its Twitter account that “GANA’s interaction contract has been targeted by an external attack, resulting in unauthorized asset theft.”

Total loss estimated at $3,100,000.