On October 4-6, 2022 the BNB Chain's BSC Token Hub bridge (connecting BEP2 and BEP20) was exploited via incomplete Merkle proof verification in the bridge contract, allowing an attacker to forge proofs and mint 2 million BNB (~$570 million). Binance paused the chain on October 6; roughly $137M bridged out before containment; $433M remained frozen.