The BNB Chain-based DeFi protocol Ankr confirmed today (2nd) that it was hacked, with approximately $5 million missing.
The Ankr team stated, “Our aBNB tokens (BNB staking receipt tokens) have been stolen. We are currently working with exchanges to immediately suspend trading. All underlying assets on Ankr staking remain safe, and all infrastructure services are unaffected.”
Blockchain security firm PeckShield analyzed that in the Ankr breach, due to an infinite minting vulnerability in the aBNBc token contract, the hacker could exploit this flaw to bypass caller verification and obtain arbitrary minting permission.
PeckShield noted that the hacker minted nearly 20 trillion aBNBc tokens out of thin air and transferred 900 BNB (worth approximately $253,000) to Tornado Cash, while bridging USDC and ETH to Ethereum. It added that the hacker currently holds 3,000 ETH (approximately $3.8 million) and 500,000 USDC.
As of now, the attacker has successfully profited about 5 million USDC, while the price of aBNBc has almost dropped to zero, and liquidity in the PancakeSwap trading pool has been drained.
Disclaimer: This article is for market information purposes only. All content and views are for reference only and do not constitute investment advice. They do not represent the views or positions of this platform. Investors should make their own decisions and transactions. The author and this platform shall not bear any responsibility for direct or indirect losses arising from investors’ transactions.
