BNB News Today: BNB Chain's X Hack Unveils Crypto's Social-Layer Security Blind Spot

BNB Chain announced on October 1, 2025, that its team had regained full access to the @BNBCHAIN X account, which had been compromised earlier that day. The incident involved the posting of 10 phishing links by attackers, resulting in an estimated $8,000 in on-chain losses. The largest individual victim reportedly lost $6,500, while the attacker deployed a phishing contract that initially injected $17,800 before redeeming Meme tokens for $22,000. The chain confirmed victims will receive full compensation for their losses BNB Chain: Access to account X has been restored, and victims …^[1].

The breach was first flagged by Binance co-founder Changpeng Zhao (CZ), who issued an urgent warning to users to avoid clicking any links from the compromised account. CZ stated that the security teams had notified X (formerly Twitter) to suspend the account and requested takedown of phishing websites. The fraudulent posts promoted a fake "HODLer Airdrop" event, directing users to a phishing site mimicking "bnbchain.org." These links exploited the platform's verified status to lend credibility to the scam, which aimed to steal wallet information and digital assets CZ Issues Urgent Alert: BNB Chain Official X Account …^[2].

Security experts highlighted the attack as a "social-layer breach," emphasizing that the blockchain itself remained uncompromised. ChainGPT CEO Ilan Rakhmanov speculated that a team member may have inadvertently granted permissions to a malicious third-party application, while researcher Shanaka Anslem Perera recommended freezing the X handle and resetting authentication apps. The incident has sparked broader scrutiny of X's security protocols, particularly for high-profile verified accounts BNB Chain: The team has regained full access to the X account^[3].

BNB Chain's response included immediate actions to restore account access and mitigate further damage. By 6:00 AM UTC, the fraudulent airdrop posts were removed, and the Chinese-language BNB Chain account issued warnings to users. The chain's security team also advised disconnecting all linked applications and verifying domain names to prevent similar attacks. Despite these efforts, the BNB token price dipped 0.95% in the 24 hours following the breach, trading near $1,000 BNB Chain’s X Account Hacked: CZ Warns Users to Stay SAFU …^[4].

The attack underscores persistent vulnerabilities in social media security for crypto projects. Phishing tactics, such as domain spoofing (e.g., replacing "i" with "l" in URLs), remain prevalent. SlowMist's chief information security officer linked the malicious domain to the Inferno phishing group, known for deploying pre-made phishing sites. The incident aligns with a broader trend of social engineering attacks exploiting trust in verified accounts, raising questions about the effectiveness of current verification systems BNB Chain’s X Account “May Have Been” Hacked, CZ Issues Warning^[5].

While BNB Chain has not disclosed the root cause of the breach, it has confirmed that investigations are ongoing. The chain's statement emphasized that the incident's impact is limited to the compromised X account, with no further disruptions to its blockchain operations. Users are advised to remain vigilant and verify all links, even those appearing to originate from official channels. The compensation plan for victims is expected to be finalized in the coming days BNB Chain’s X Account Hacked as SlowMist Exec Flags Inferno …^[6].