BounceBit Hack
Reported loss
$3.0M
Improper Access Control
What happened
Between August 19 and 20, 2026, 286,543,148 BB moved in 14 unauthorized transfers on BounceBit Chain.
How it happened
BounceBit attributed the incident to an authorization flaw in a native chain feature, halted and then sunset the chain, and announced a BNB Chain migration using a snapshot that excluded the attacker-held BB.
Protocol details
Classification
Access Control
Protocol Type
Yield
Implementation language
Go
Protocol links
Website
@bounce_bit
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.