In a concerning incident highlighting the persistent cybersecurity risks in the crypto space, the official X account of the BNB Chain blockchain network — with nearly four million followers — was compromised on Wednesday. The hackers leveraged the account to distribute phishing links designed to steal wallets and private information, underscoring vulnerabilities in even the most prominent blockchain communities.
- The official BNB Chain X account was hacked, spreading phishing links to steal crypto assets.
- Binance founder Changpeng “CZ” Zhao issued a warning advising users to be cautious of malicious posts.
- Security experts identified the phishing domain as linked to the notorious Inferno phishing group.
- The incident demonstrates ongoing cybersecurity challenges within major crypto organizations.
- Authorities are working to suspend the malicious account and remove the phishing links.
The incident prompted quick action from Binance and BNB Chain’s security teams, who responded to mitigate potential damages. CZ urged followers to remain vigilant, emphasizing the importance of verifying website domains before connecting any wallets. He warned the community not to interact with suspicious links, particularly those requesting wallet connection or sensitive information.
A BNB Chain spokesperson told Cointelegraph that their security teams are actively investigating the breach and plan to provide further updates soon. Meanwhile, cybersecurity analysts note that the attackers exploited common tactics, such as swapping characters in malicious domain names to mimic legitimate websites. Such tactics continue to challenge the security protocols of crypto communities.
Phishing links disguised as Wallet Connect prompts
Fast-evolving phishing schemes are increasingly sophisticated, with hackers employing tactics like replacing a single letter — turning an “i” into an “l” — to make malicious domains look authentic. According to security expert 23pds, who operates under a pseudonym on X, the compromised BNB Chain account was used to serve such deceptive links, which directed users to fraudulent sites designed to steal wallet credentials.
Investigations suggest that the malicious domain is linked to the Inferno phishing group, infamous for deploying phishing-as-a-service platforms that allow cybercriminals to launch convincing fake websites mimicking legitimate crypto project interfaces. Such tools have surged in popularity over the past year, significantly increasing the risk for unsuspecting users.
The occurrence underscores the increasing challenge crypto projects face in safeguarding their brand presence online. The breach appears to expose gaps in BNB Chain’s security measures, with critics arguing that more robust practices are needed to shield community assets from targeted attacks.
CZ urges vigilance with domain verification
Changpeng Zhao, in his warning to the crypto community, stressed the importance of scrutinizing links—even from verified sources. “Always check the domains very carefully, even from official X handles. Stay SAFU!” he cautioned, emphasizing that users should adopt best practices to prevent falling victim to scams.
Although the phishing posts were removed at the time of writing, it remains uncertain whether any users connected their wallets or suffered losses. The incident serves as a stark reminder for all crypto enthusiasts to remain cautious and verify URLs diligently when interacting with crypto project accounts online.
