הסיווג ושיטת התקיפה משקפים את דיווחי המקורות. תיאורים מפורטים מוצגים בשפת המקור; לקריאת התחקיר המלא ניתן לפתוח את הקישור המצורף.
DefiLlamaתיאור המקור באנגלית
BounceBit Chain was exploited through an authorization flaw in a protocol-level module inherited from the Evmos stack. A function supporting vesting/lockup operations allowed the caller to specify another account as the source of funds without correctly verifying that the source account had authorized the debit. The attacker used this flaw to transfer 286.54M BB from nine accounts without stealing private keys or forging signatures. BounceBit subsequently halted the chain and decided to retire its Layer 1 and reissue BB on BNB Chain from a pre-exploit snapshot
SlowMistתיאור המקור באנגלית
An attacker exploited a protocol-level authorization flaw in the Evmos stack, transferring approximately 286.5 million BB from nine mainnet accounts across 14 transactions without the owners’ authorization. No private keys were compromised, no signatures forged, and no wallets breached. BounceBit permanently sunset the L1 chain and reissued BB as a BEP-20 token on BNB Chain based on a pre-attack snapshot.
הסיווג ושיטת התקיפה משקפים את דיווחי המקורות. תיאורים מפורטים מוצגים בשפת המקור; לקריאת התחקיר המלא ניתן לפתוח את הקישור המצורף.
DefiLlamaתיאור המקור באנגלית
BounceBit Chain was exploited through an authorization flaw in a protocol-level module inherited from the Evmos stack. A function supporting vesting/lockup operations allowed the caller to specify another account as the source of funds without correctly verifying that the source account had authorized the debit. The attacker used this flaw to transfer 286.54M BB from nine accounts without stealing private keys or forging signatures. BounceBit subsequently halted the chain and decided to retire its Layer 1 and reissue BB on BNB Chain from a pre-exploit snapshot
SlowMistתיאור המקור באנגלית
An attacker exploited a protocol-level authorization flaw in the Evmos stack, transferring approximately 286.5 million BB from nine mainnet accounts across 14 transactions without the owners’ authorization. No private keys were compromised, no signatures forged, and no wallets breached. BounceBit permanently sunset the L1 chain and reissued BB as a BEP-20 token on BNB Chain based on a pre-attack snapshot.
