BounceBit will permanently shut down its own blockchain after an attacker drained roughly 286.5 million BB tokens through a flaw in a protocol module, and will instead redeem BB as a BEP-20 token on BNB Chain. The project says a patch was not enough because the underlying software stack behind its chain has itself been discontinued.
BounceBit, backed by YZi Labs, has confirmed it will permanently cease the BounceBit Chain rather than repair it. Instead, the project will redeem BB as a BEP-20 token on BNB Chain.
How the exploit unfolded
An attacker misused a flaw in one of BounceBit Chain's built-in protocol modules, moving BB tokens from nine ordinary mainnet accounts without the owners' permission. The attacker moved approximately 286.5 million BB through 14 transactions over roughly five hours, because the protocol failed to verify whether the debited account had authorized each transfer.
As a result, the attacker could name another account as the funding source and move its BB without consent. BounceBit halted the blockchain to contain the exploit, and no further unauthorized transfers occurred afterward.
Why a patch was not enough
The exploit exposed a deeper problem than one defective module. BounceBit Chain was built on the Evmos stack, which included the vesting and lockup module at fault, but Evmos itself has been discontinued. Therefore, simply patching the vulnerability and restarting the network would not have been sufficient to prevent further attacks.
BounceBit already runs many of its products on BNB Chain, where user activity is increasingly concentrated, and the project says the move gives it more mature security, deeper liquidity, and wallet support. So rather than spending resources rebuilding its own layer 1, BounceBit is consolidating around BNB Chain.
Recovery plan and wider context
BounceBit has asked exchanges to freeze relevant funds while avoiding blanket freezes that could affect innocent users. The project plans to restore user balances from the pre-attack snapshot rather than rely on recovering the stolen tokens.
This is not the first exchange shutdown of the year. According to AMBCrypto's earlier reporting, about nine exchanges and trading platforms have been shut down in 2026, which is the lowest annual count in at least eight years.
Source: AMBCrypto
Trading involves risk.
Risk Disclaimer
