Binance, the world’s largest cryptocurrency exchange, is reportedly nearing identification of the attackers behind one of the biggest crypto exploits of the year — a $570 million hack on its BNB Chain blockchain network earlier this month.
The attack took place on October 6, when hackers targeted BSC Token Hub, the cross-chain bridge connecting BNB Beacon Chain and BNB Smart Chain, exploiting a forged “proof of authority” system that the network uses to verify transactions. The exploit allowed the attacker to mint and withdraw 2 million BNB tokens, worth roughly $570 million at the time.
Binance co-founder and CEO Changpeng “CZ” Zhao moved quickly once the exploit was detected, reaching out to the network’s validators and getting them to temporarily pause the blockchain. That single move is being credited with limiting the actual damage. While the hacker managed to move $570 million worth of tokens out, the bulk of it — somewhere between 80% and 90% by Zhao’s estimate — remained stuck in the attacker’s own wallet once the chain was frozen, capping the real loss at around $100 million. Binance also said no user funds on the exchange itself were affected, and roughly $7 million of the stolen amount has already been frozen with the help of other platforms.
In the weeks since, Binance says it has been working with law enforcement agencies around the world, combining its own blockchain forensics with external help to track down who was behind the attack. Zhao said on October 24 that the company was closing in on identifying the individual or group responsible. The company’s Chief Communications Officer has also suggested the hack bears the hallmarks of a state-backed actor, a pattern that has become increasingly common in large-scale crypto exploits over the past few years.
The BNB Chain hack is also part of a larger, uglier trend. Bridges — the software that lets tokens move between different blockchains — have become one of the favourite targets for crypto hackers precisely because of how much value flows through them and how complex they are to secure. The BNB Chain exploit came in a year that had already seen roughly $2 billion stolen through bridge attacks alone, and October itself was dubbed the worst month of the year for crypto hacks, with total losses crossing $700 million once other DeFi exploits were factored in.
In response, BNB Chain says it is introducing a new governance mechanism intended to prevent similar attacks, along with an expansion of its validator set — it currently runs with 26 active validators — as part of a broader push toward decentralisation. Binance has also pointed to its Secure Asset Fund for Users (SAFU), an insurance reserve it built out of trading fees specifically to cover exchange users in the event of a hack, though this particular exploit hit the blockchain layer rather than exchange balances directly.
It’s worth noting this isn’t Binance’s first brush with hackers, nor is 2026 an isolated bad year for the exchange — it has weathered smaller breaches before and come out the other side relatively unscathed each time, largely because of how it has handled communication and containment in the moment.
More broadly, the BNB Chain hack lands in the middle of what’s shaping up to be a brutal stretch for internet security generally. Just weeks before the Binance exploit, Japan’s GMO Internet Group had hackers hijack its cloud servers to run unauthorized FX trades, with its CEO describing the broader state of the internet in stark terms. Around the same time, a critical flaw in the Brotli decoder forced Node.js to rush out emergency patches, while OpenAI’s own security initiative put out a dedicated advisory page just to help companies track the fallout. Cloud platform Railway also had to pause all deployments after disclosing a breach that may have exposed customer secrets, and Australia’s cyber agency separately flagged critical vulnerabilities in Fortinet, one of the world’s biggest cybersecurity vendors.
Closer to home, India’s own eMudhra became the centre of a separate global scare this month after a certificate key compromise wiped out ₹1,450 crore of its market cap in two days, with its stock hitting a 20% lower circuit as the scale of the issue became clear.
Taken together, the BNB Chain hack is less an isolated crypto story and more a data point in a year where bridges, certificates, and core internet infrastructure have all taken turns being the weak link — and where even one of the best-resourced exchanges in the world needed a fast, somewhat improvised intervention to keep a $570 million exploit from being far worse.