BNB Chain, one of the biggest blockchain networks in the crypto world, faced a major security scare when hackers took control of its official X (Twitter) account. The account, followed by nearly 4 million users, was used to share fake Wallet Connect links designed to steal crypto from unsuspecting users.
CZ Sounds the Alarm
Binance founder Changpeng “CZ” Zhao quickly confirmed the hack and warned the crypto community to avoid clicking any suspicious links shared by the compromised account.“The hacker posted a bunch of phishing links that ask users to connect their wallets. Do NOT connect your wallet,” CZ posted on X.He added that BNB Chain’s security team has already alerted X and sent takedown requests for the malicious websites. The team is now working to fully restore control of the account.
How the Hackers Tricked Users
Security experts from SlowMist, a well-known blockchain security firm, explained that the hackers used a classic phishing trick. They changed a single letter in the website domain to make it look almost identical to the real one.
For example, Hackers replaced the letter “i” with “l” — something most of the users will not notice at first glance.
According to 23pds, SlowMist’s Chief Information Security Officer, the phishing domains are connected to the “Inferno Drainer” group, a notorious crypto phishing operation that’s been active since 2022.
Inferno Drainer is known for selling ready-made phishing kits that let criminals easily set up fake sites that look like popular crypto platforms. For more in-depth crypto news, analysis, and updates, check out Coinography — your go-to source for everything blockchain and cryptocurrency.
A Wake-Up Call for Crypto Security
The hack highlights the growing security risks faced by official crypto project accounts. Even verified accounts are not immune to takeovers.23pds criticized the BNB Chain team’s security practices, saying,
“The team’s security awareness shouldn’t be this weak.”
This incident raises concerns about how well major crypto companies are protecting their official communication channels.
Always Double-Check Domains
CZ reminded users to check URLs carefully, even if they come from official accounts.
“Always verify the domain names very carefully — even if the link is shared by verified handles. Stay SAFU!” he advised.
By 8:26 am UTC, BNB Chain confirmed they had regained control of their X account.
Damage Report: 10 Links, $8,000 Lost
The hackers posted a total of 10 phishing links, resulting in around $8,000 in stolen funds across different blockchains. BNB Chain stated that all affected users will be fully reimbursed.
The team is still investigating exactly how the hackers managed to break in and promised to share more details soon.
FAQs — BNB Chain X Account Hack
Q1. What exactly happened to BNB Chain’s X account?
Hackers took control of BNB Chain’s official X account and shared fake Wallet Connect links to trick users into connecting their crypto wallets to phishing sites.
Q2. Who warned users about the scam?
Binance founder CZ (Changpeng Zhao) alerted the community and advised everyone to avoid clicking the suspicious links.
Q3. How did the hackers make the phishing site look real?
They used a simple domain trick, changing one letter (like “i” to “l”), to make the fake website look legitimate.
Q4. Who is behind the attack?
The phishing domains are linked to Inferno Drainer, a notorious crypto wallet-draining group known for selling phishing tools.
Q5. How much money was stolen?
About $8,000 worth of crypto was stolen through 10 phishing links. BNB Chain has said that all victims will get their money back.