Major Exploit Hits B² Network on BNB Chain, $3.86M in Losses

On-chain analyst Specter reported a significant security breach targeting B² Network, a Layer-2 project built on BNB Chain, on July 23. The exploit resulted in the theft of approximately 8.59 million B2 tokens, the project's native asset, with an estimated value of $3.86 million at the time of the incident.

The Attacker's Fund Movement Trail

Following the successful exploit, the attacker initiated a series of moves to obfuscate the trail of the stolen funds:

  • Step 1: Asset Swap - The stolen B2 tokens were swapped for roughly 5,409 WBNB, valued at about $3.11 million.
  • Step 2: Cross-Chain Bridge - This substantial sum was then bridged from the BNB Chain over to the Ethereum network.
  • Step 3: Obfuscation Attempt - Current monitoring indicates the attacker is now working to move the funds further into the Zcash network via cross-chain infrastructure like NEAR Intents, a common tactic to enhance anonymity.

Project Team's Public Response and Negotiation

In a notable post-incident move, the B² Network team opted for direct on-chain communication. They sent a message to the attacker's address, effectively initiating a public negotiation.

The team proposed that if the attacker returns at least 10% of the stolen funds (around $386,000) to a designated official address within the next 24 hours, they would consider it a "goodwill gesture." In return, the team pledged not to pursue any legal action against the perpetrator.

This approach of direct on-chain messaging is relatively uncommon in past security incidents and underscores the project's urgency in recovering assets and mitigating losses. It remains to be seen whether the hacker will respond to this offer.