BNB Chain’s Official X Account Hacked: CZ Warns Users to Avoid Phishing Links

The official X account of BNB Chain was hacked on Wednesday, with attackers posting phishing links that targeted crypto wallets. Binance founder Changpeng “CZ” Zhao confirmed the hack and warned users not to connect their wallets to any suspicious sites.

• CZ confirmed the attack and urged users not to click or connect wallets.
• Phishing sites were disguised as Wallet Connect prompts.
• SlowMist linked the domains to the Inferno Drainer hacker group.
• BNB Chain recovered control of the account and promised full reimbursement for affected users.
• The total loss from the attack was around $8,000.

BNB Chain’s official X account, followed by nearly four million users, was hacked early Wednesday. The attackers posted fake Wallet Connect links that led to phishing websites, designed to steal users’ crypto funds.

Binance founder CZ confirmed the incident, warning followers not to interact with any of the malicious links. “The hacker posted a bunch of links to phishing websites that ask for Wallet Connect. Do NOT connect your wallet,” CZ wrote on X. He added that the BNB Chain security team had alerted X, filed takedown requests for the phishing sites, and was working to restore access.

A BNB Chain spokesperson told Cointelegraph that the team is still investigating the root cause of the breach. “We’re working closely with our security partners to identify how it happened and will share details once confirmed,” they said.

Cybersecurity firm SlowMist later revealed that the phishing domains used in the hack were linked to the Inferno Drainer group — a known phishing-as-a-service network that helps affiliates set up fake websites mimicking legitimate crypto projects. According to SlowMist’s CISO, 23pds, the hackers used a common trick by replacing letters in the domain to make it look genuine.

“BNB Chain’s official English X account has been hacked! The phishing website changed the letter ‘i’ into ‘l’,” 23pds posted, warning users to stay alert.

Inferno Drainer first appeared in 2022 and became infamous in 2023 for helping attackers steal millions from crypto users. The group sells ready-made phishing kits that drain wallets once users connect them.

Following the breach, CZ reminded users to double-check domain names, even when links come from official or verified accounts. “Always check the domains carefully, even from official X handles. Stay SAFU!” he wrote.

By 8:26 a.m. UTC, BNB Chain confirmed that it had regained control of its X account. The team said that 10 phishing links were posted during the compromise, resulting in $8,000 in losses across multiple chains. The project promised to fully reimburse all affected users.

Final Thought

The BNB Chain hack is a strong reminder of how even verified crypto accounts can be targeted. Users should always verify links, avoid connecting wallets to unknown sites, and stay cautious on social media. Quick responses from CZ and the BNB Chain team helped limit the damage, but the event highlights the ongoing phishing risks in the crypto world.