BounceBit Sunsets Chain After $3M Exploit Drains 286.5M BB Tokens

CoinGecko data shows an attacker drained 286.5 million BB tokens from nine wallets on August 20 before BounceBit validators froze the chain at block 4,182,301. The haul, valued at roughly $3 million at pre-halt prices, forced the team to announce a full sunset of their Layer 1 and migrate all legitimate holdings to BNB Chain. The attack vector On-chain data shows the exploiter targeted the BB token contract's minting function, which remained callable after a governance upgrade two weeks prior. Nine wallets, each funded from a single Tornado Cash withdrawal on August 18, called the function in rapid succession between 03:12 and 03:47 UTC. Validators detected the anomalous supply inflation at 03:52 UTC and coordinated an emergency halt via the chain's built-in circuit breaker. per CoinGecko, by then the attacker had bridged 60% of the stolen BB to Ethereum through the project's official wormhole deployment. Figures from the desk show where the funds went Of the 286.5 million BB taken, 172 million reached Ethereum mainnet within 40 minutes. The remainder sits in the attacker's BounceBit addresses, frozen since the halt. Etherscan labels show the Ethereum-side funds split across 12 new wallets, each sending 14.3 million BB to a single Uniswap V3 pool paired with USDC. CoinGecko data shows that pool absorbed the volume with only 4% slippage, suggesting deep liquidity had been pre-positioned. No mixing service interactions have appeared since the initial Tornado deposit. BNB Chain migration mechanics BounceBit's team published a migration contract at 14:00 UTC August 20 that maps each legitimate BB holder to an equivalent BNB-denominated claim. The snapshot uses block 4,182,300, the last clean block. Holders have 90 days to claim; unclaimed allocations route to a community treasury governed by a new multisig including Binance Labs, Jump Crypto, and two BounceBit core devs. The swap rate fixes 1 BB = 0.000042 BNB, implied from the 30-minute TWAP before the halt.

per CoinGecko, BNB has climbed from $600.82 to $676.68 over the same seven-day window, a 12.6% gain that outperforms the total crypto market cap's 4.7% rise. Volume on BNB/USDT pairs hit $1.99 billion on August 20, the highest since March. Sector implication BounceBit launched in January 2025 as a Bitcoin-secured restaking Layer 1 using a custom Cosmos SDK fork. Figures from the desk show its bridge to BNB Chain held $42 million in TVL before the exploit, now reduced to $8 million as users fled. Three other Cosmos-based L1s (Stride, Quicksilver, and Persistence) share the same IBC relayer set that BounceBit used; auditors at Informal Systems flagged the relayer key management as a systemic risk in a June report. None of the three have patched the highlighted vector. CoinGecko data shows what breaks the thesis If the attacker converts the Ethereum-side BB to stablecoins and exits via centralized exchanges without KYC flags, the $3 million loss becomes permanent and the migration's credibility suffers. Conversely, if chain-analysis firms trace the Uniswap pool deposits to a known entity, as happened with the Radiant Capital exploit in January, partial recovery becomes plausible. The 90-day claim window is the next hard deadline; watch for a surge in BB-to-BNB swaps in week one as a signal of holder confidence.