BounceBit

BounceBit Chain was exploited through an authorization flaw in a protocol-level module inherited from the Evmos stack. A function supporting vesting/lockup operations allowed the caller to specify another account as the source of funds without correctly verifying that the source account had authorized the debit.

54M BB from nine accounts without stealing private keys or forging signatures. BounceBit subsequently halted the chain and decided to retire its Layer 1 and reissue BB on BNB Chain from a pre-exploit snapshot.