The official X account of the BNB Chain blockchain network, which has almost four million followers, was hacked on Wednesday.
Hackers used the account to spread phishing links targeting cryptocurrency wallets, which raised immediate alarm across the crypto community.
Binance founder Changpeng “CZ” Zhao confirmed the hack and warned his followers not to click on any suspicious links. “The hacker posted a bunch of links to phishing websites that ask for Wallet Connect. Do NOT connect your wallet,” he wrote. CZ said that BNB Chain’s security team has already told X about the hack and is working to get the account back. They have also asked for the phishing websites to be removed.
A BNB Chain team member said that they are still investigating what happened. The team said they will share more information soon. Right now, it is not clear if anyone lost money or connected their wallet to the fake sites.
According to SlowMist’s chief information security officer, who goes by 23pds on X, the attackers used a classic trick to make their phishing links appear legitimate. The hackers swapped letters in the domain, changing the letter “i” into “l,” to trick users. “BNB Chain’s English official X account has been hacked! The phishing website changed the letter i into l,” 23pds warned, urging users not to be deceived. He also suggested that the phishing domain might be connected to the infamous Inferno phishing group.
Inferno is a phishing service that started in 2022 and became famous in 2023. It lets its members set up fake websites that look like real crypto project sites. These sites try to steal wallets or private information from people who connect.
CZ also reminded users to always check web addresses carefully, even if the link comes from an official or verified account. “Always check the domains very carefully, even from official X handles. Stay SAFU!” he said.
By the time of writing, the phishing posts were no longer on X. But it is still not known if any users were tricked or lost funds. The BNB Chain team is continuing their investigation and told followers to stay alert.
