BitBNS Hack
What happened
BitBNS, an Indian crypto exchange, lost about $7.5 million in a hack on February 1, 2022, and kept it from users for more than a year. At the time, the exchange went offline and told users it was doing "system maintenance", in a way that suggested problems with Amazon Web Services.
The incident became public on February 28, 2023, when on-chain investigator ZachXBT accused BitBNS of hiding a $7.5 million hack behind the maintenance notice. Founder Gaurav Dahake admitted the breach the next day but did not confirm the exact figure. He said the team took the exchange offline after seeing abnormally high server throughput, wrong prices and buy/sell spreads for MATIC, BNB and AAVE, and unusual withdrawals. Tokens from the platform were sent to one address, swapped into ETH and spread across several addresses.
Dahake said BitBNS reported the incident to law enforcement right away and was told to tell users only once the investigation ended or went nowhere. Cyber Crime Bengaluru was handling the case. He said some funds were recovered with help from the authorities and other exchanges but gave no amount. BitBNS has not published how the attacker got access to its systems or keys.
Protocol details
Evidence
- report @zachxbt incident report twitter.com
- analysis Indian Crypto Exchange BitBNS Says Law Enforcement Advised Against Making Hack Public coindesk.com
- analysis BitBNS discloses that they were hacked in February 2022, hid it as "system maintenance" web3isgoinggreat.com
- analysis Web Archive archive.ph
- analysis DeFiLlama defillama.com
- analysis Indian exchange Bitbns admits it was hacked for $7.5M last February cryptoslate.com
- analysis Bitbns Admits To $7.5 Mn Hack In 2022, Says Nothing Abnormal inc42.com
- analysis BitBNS Exchange Hacked for $8 Million, Incident Initially Concealed dn.institute
- analysis Bitbns Admits $7.5M Hack Occurred Back in February 2022 capitalbay.news
- analysis BitBNS discloses that they were hacked in February 2022, hid it as "system maintenance" web3isgoinggreat.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.