Digital Asset
Intelligence
Security Incident · BSC Ecosystem

BounceBit Smart Contract Vulnerability: $3.00M Reported Loss

·Historical incident record

Incident Overview

An attacker exploited a protocol-level authorization flaw in the Evmos stack, transferring approximately 286.5 million BB from nine mainnet accounts across 14 transactions without the owners’ authorization. No private keys were compromised, no signatures forged, and no wallets breached. BounceBit permanently sunset the L1 chain and reissued BB as a BEP-20 token on BNB Chain based on a pre-attack snapshot.

Sources & References

Original incident referencehttps://x.com/bouncebit/article/2090785561800061430 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    FoxMarket

    Attack methodFlash Loan Attack
    Reported loss$ 118,700
  2. Incident date
    Target

    FH Token

    Attack methodSmart Contract Vulnerability
    Reported loss$ 20,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 71,851
  4. Incident date
    Target

    Allbridge

    Attack methodBridge Logic Flaw
    Reported loss$ 190,000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 1,700,000