{"id":9474,"date":"2026-08-21T22:09:22","date_gmt":"2026-08-21T19:09:22","guid":{"rendered":"https:\/\/handoli.com\/index.php\/2026\/08\/21\/yzi-labs-backed-bouncebit-chain-shuts-down-after-3m-exploit\/"},"modified":"2026-08-21T22:09:22","modified_gmt":"2026-08-21T19:09:22","slug":"yzi-labs-backed-bouncebit-chain-shuts-down-after-3m-exploit","status":"publish","type":"post","link":"https:\/\/handoli.com\/index.php\/2026\/08\/21\/yzi-labs-backed-bouncebit-chain-shuts-down-after-3m-exploit\/","title":{"rendered":"YZi Labs-backed BounceBit Chain shuts down after $3M exploit"},"content":{"rendered":"<div><\/div>\n<p>The YZi-backed bitcoin restaking firm BounceBit announced today that it is shutting down its blockchain after hackers exploited an authorization vulnerability and stole over $3.1 million of its BB token.\u00a0<\/p>\n<p>BounceBit <a href=\"https:\/\/x.com\/bouncebit\/status\/2090785561800061430?s=20\" target=\"_blank\" rel=\"noreferrer noopener\">claims<\/a> that between August 19 and August 20, attackers were able to move 286 million BB tokens out of nine of BounceBit Chain\u2019s wallets without authorization.\u00a0<\/p>\n<h2 class=\"wp-block-heading\">Evmos stack caused exploit<\/h2>\n<p>An authorization flaw in the vesting and lockup account module hosted by Evmos, and utilized by BounceBit Chain, seemingly led to the exploit.\u00a0<\/p>\n<p>BounceBit says the attacker sent an estimated 254 million BB tokens to one \u201cmajor\u201d crypto exchange, almost 10 million BB tokens to another exchange, and 18.5 million BB tokens remain sitting in a consolidated address.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">We have identified an issue affecting BounceBit Chain and have paused nodes out of caution while we deploy a fix. BB transactions are temporarily unavailable.<\/p>\n<p>This is limited to the chain itself, the CeDeFi app is not affected, and neither are smart contracts or vaults.<\/p>\n<p>No\u2026<\/p>\n<p>\u2014 BounceBit (@bouncebit) <a href=\"https:\/\/x.com\/bouncebit\/status\/2090415943646347558?ref_src=twsrc%5Etfw\">August 20, 2026<\/a><\/p><\/blockquote>\n<\/div><figcaption class=\"wp-element-caption\">BounceBit flagging the exploit one day before the firm sunsets. <\/figcaption><\/figure>\n<p><em>Read more: <a href=\"https:\/\/protos.com\/aave-tvl-still-down-43-since-kelpdao-hack\/\" target=\"_blank\" rel=\"noreferrer noopener\">Aave TVL still down 43% since KelpDAO hack<\/a><\/em><\/p>\n<h2 class=\"wp-block-heading\">BounceBit rules out network upgrade<\/h2>\n<p>BounceBit claims that it is sunsetting its blockchain after a technical review and will not be able to implement a network upgrade since it is built on the already discontinued Evmos infrastructure.\u00a0<\/p>\n<p>It said, \u201cMoving our fork onto a successor codebase would therefore not be a conventional upgrade, but a substantial re-platform requiring a full rebuild, re-audit, and revalidation before it could safely carry user assets again.\u201d<\/p>\n<h2 class=\"wp-block-heading\">BB tokens will now turn into BEP-20 tokens<\/h2>\n<p>Every other BB token, bar the attackers, will be reissued as a BEP-20 token on BNB Chain. A snapshot of the block before the exploit will be used to determine the sum of BEP-20 tokens a user will receive. <\/p>\n<p>BounceBit also claims it has asked crypto exchanges to freeze specific addresses that won\u2019t affect the funds of innocent users.\u00a0\u00a0\u00a0<\/p>\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"tyuf4UDwXQ\"><p><a href=\"https:\/\/protos.com\/fourth-crypto-exchange-shuts-down-in-just-six-weeks\/\">Fourth crypto exchange shuts down in just six weeks<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p><em>Read more: <a href=\"https:\/\/protos.com\/tone-vays-says-his-pc-looks-ok-after-giving-hackers-access\/\" target=\"_blank\" rel=\"noreferrer noopener\">Tone Vays says his PC looks \u2018OK\u2019 after giving hackers access<\/a><\/em><\/p>\n<p>BB token holders were told that they won\u2019t need to do anything and that they should be cautious of scammers offering help.\u00a0<\/p>\n<p>BounceBit <a href=\"https:\/\/www.theblock.co\/news\/deals\/2024-02-28-bitcoin-restaking-protocol-bouncebit-funding-tvl-279603\" target=\"_blank\" rel=\"noreferrer noopener\">raised<\/a> $6 million in 2024 as part of a seed funding round co-led by Blockchain Capital and Breyer Capital. According to the Binance Square moderator \u201cTang Hua,\u201d YZi Labs <a href=\"https:\/\/www.binance.com\/en\/square\/post\/28467107968962\" target=\"_blank\" rel=\"noreferrer noopener\">invested<\/a> later in April 2024.\u00a0<\/p>\n<p><em>Got a tip? Send us an email securely via\u00a0<a href=\"https:\/\/leaks.protos.com\/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Protos Leaks<\/em><\/a>. For more informed news and investigations, follow us on\u00a0<a href=\"https:\/\/twitter.com\/protos\" target=\"_blank\" rel=\"noreferrer noopener\">X<\/a>,\u00a0<a href=\"https:\/\/bsky.app\/profile\/protos.com\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Bluesky<\/em><\/a>, and\u00a0<a href=\"https:\/\/news.google.com\/publications\/CAAqJAgKIh5DQklTRUFnTWFnd0tDbkJ5YjNSdmN5NWpiMjBvQUFQAQ\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Google News<\/em><\/a>, or subscribe to our\u00a0<a href=\"https:\/\/youtube.com\/protosmedia\" target=\"_blank\" rel=\"noreferrer noopener\"><em>YouTube<\/em><\/a>\u00a0channel.<\/em><\/p>\n<p>The post <a href=\"https:\/\/protos.com\/yzi-labs-backed-bouncebit-chain-shuts-down-after-3m-exploit\/\">YZi Labs-backed BounceBit Chain shuts down after $3M exploit<\/a> appeared first on <a href=\"https:\/\/protos.com\/\">Protos<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>The YZi-backed bitcoin restaking firm BounceBit announced today that it is shutting down its blockchain after hackers exploited an authorization vulnerability and stole over $3.1 million of its BB token.\u00a0 BounceBit claims that between August 19 and August 20, attackers were able to move 286 million BB tokens out of nine of BounceBit Chain\u2019s wallets [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":9475,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":[],"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[147],"tags":[],"class_list":["post-9474","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-invest"],"_links":{"self":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts\/9474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/comments?post=9474"}],"version-history":[{"count":0,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts\/9474\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/media\/9475"}],"wp:attachment":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/media?parent=9474"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/categories?post=9474"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/tags?post=9474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}