Binance Halts Withdrawals Following An Exploit On Crypto Project Ankr

You've been hacked!
Getty Images/Yuri_Arcurs

Binance, the largest crypto exchange by trading volume, paused withdrawals following an exploit on the crypto node project Ankr.

Key Takeaways

  • Binance paused the withdrawal following an exploit on the crypto node project Ankr.
  • The attacker swapped 20 trillion aBNBc tokens for BNB, then moved those to crypto mixer Tornado Cash. 
  • Following the hack, the Ankr token fell by 99.5% to $1.51 per data from Coingecko.

Binance CEO Confirmed the Hack

Binance's Chief Executive officer, Changpeng Zhao(CZ), tweeted today, ''Initial analysis is developer private key was hacked, and the hacker updated the smart contract to a more malicious one."  "Binance paused withdrawals a few hours ago. Also froze about $3m that hackers move to our CEX," he added.

Ankr is a DeFi staking and web platform allowing users to stake and build in the blockchain ecosystem easily and affordably. As confirmed by the Ankr team, the hackers carted away an estimated $5 million equivalent in BNB, which is the native token of Binance.

Hackers Minted Infinite Tokens

The exploit was possible because the attackers minted an infinite amount of aBNBc tokens by leveraging the token’s smart contract. These tokens are the staked version of Binance's BNB token, which earns rewards on Ankr. 

After minting quadrillions of aBNBc tokens, the attacker swapped 20 trillion for BNB, then moved them to crypto mixer Tornado Cash, which enables users to break links in on-chain transactions and hide the sender's identity. The attacker then swapped the BNB tokens for 5 million USDC and began moving them off the Binance chain to Ethereum.  Following the news, Ankr's price fell by 99.5% to $1.51.

The Bottom Line

Ankr is reimbursing users impacted by a $5 million exploit on its platform. "We will take a snapshot and reissue ankrBNB to all valid aBNBc holders before the exploit. The ankr BNB token will continue to be redeemable, while aBNBc and aBNBb will no longer be redeemable," Ankr tweeted.

Even though Binance's loss was relatively small, it was the crypto exchange's second hack in two months. The whole year of 2022 was vulnerable to crypto hacks, with Binance losing $570 million in October.

Article Sources
Investopedia requires writers to use primary sources to support their work. These include white papers, government data, original reporting, and interviews with industry experts. We also reference original research from other reputable publishers where appropriate. You can learn more about the standards we follow in producing accurate, unbiased content in our editorial policy.
  1. Twitter. ''@cz_binance.2:12 AM · Dec 2, 2022''

  2. Ankr. ''Ankr''

  3. Twitter. ''@ankr.5:25 AM · Dec 2, 2022''

  4. CoinMarketCap. ''Ankr Price''

Take the Next Step to Invest
The offers that appear in this table are from partnerships from which Investopedia receives compensation. This compensation may impact how and where listings appear. Investopedia does not include all offers available in the marketplace.