The cyberattack led to a loss of confidence and the potential for lost cryptocurrency
The official X account of the BNB Chain blockchain was briefly taken over on Wednesday, leading to the posting of multiple phishing links aimed at stealing funds from unsuspecting users. With nearly four million followers, the account posed a major target for scammers who disguised malicious sites as legitimate crypto platforms.
ALERT 🚨: The @BNBCHAIN X account is compromised.
The hacker posted a bunch of links to phishing websites that ask for Wallet Connect.
Do NOT connect your wallet.
Security teams have notified X already, working to suspend the account first, then restore access.
Also take-down… https://t.co/QeEnCCbFZe
— CZ 🔶 BNB (@cz_binance) October 1, 2025
Binance founder Changpeng “CZ” Zhao confirmed the breach and warned the community not to click on or connect wallets to the fraudulent links. He explained that attackers were attempting to trick users into approving transactions through Wallet Connect prompts, which would give hackers access to their funds.
The BNB Chain security team acted quickly to regain control of the account and coordinate with X to suspend the malicious activity. At the same time, takedown requests for the phishing domains were filed to prevent further damage. Investigators are still looking into how the attackers gained access in the first place.
According to security experts, the hackers used a simple but effective method: altering letters in the phishing domain to make the websites appear genuine. This tactic is a hallmark of the Inferno phishing group, which is known for providing phishing-as-a-service tools that help affiliates set up fake crypto portals.
The incident highlights the ongoing risks faced by major blockchain projects and the responsibility they carry in protecting their communities. SlowMist’s chief security officer noted that the attack revealed weaknesses in account security practices, stressing that vigilance is critical when handling platforms with large audiences.
By the time the account was secured, ten phishing links had been posted, causing an estimated $8,000 in losses. The BNB Chain team stated that all victims will be reimbursed. Zhao reminded users to verify domains carefully, even if they come from official or verified accounts, emphasizing the importance of personal caution in the crypto space.
