The BounceBit team reported that the attack lasted from August 19 to 20. The attackers managed to move 286 million BB tokens worth $3.1 million from nine BounceBit Chain addresses. The hackers exploited an authorization flaw in the vesting and account staking module of Evmos, the stack on which the BounceBit Chain network was built.
Part of the stolen tokens was sent by the hacker to cryptocurrency exchanges: approximately 254 million BB was transferred to an unnamed major platform, nearly 10 million BB to another exchange, and the remaining 18.5 million BB remains on one address. The BounceBit team has already contacted exchanges requesting the freezing of specific addresses.
The developers decided not to restore the network but to completely shut down BounceBit Chain, as the blockchain was built on the now non-functional Evmos infrastructure. The developers explained: migrating a fork to a new codebase would require a complete rebuild of the platform, as well as re-auditing and validation, before the network could securely transfer assets again.
BB tokens will be reissued as BEP-20 tokens on the $BNB Chain. A snapshot of the block before the attack—number 20,697,260—will be used to determine the amount of BEP-20 tokens customers should receive. The stolen 286.5 million BB are not included in the new issuance. Users do not need to take any action to receive the new tokens—they will be automatically distributed to addresses on the $BNB Chain, the project team promises.
We have identified an issue affecting BounceBit Chain and have paused nodes out of caution while we deploy a fix. BB transactions are temporarily unavailable.
— BounceBit (@bouncebit) August 20, 2026
This is limited to the chain itself, the CeDeFi app is not affected, and neither are smart contracts or vaults.
No...
In 2024, the BounceBit project raised $6 million in investments from companies Blockchain Capital and Breyer Capital. YZi Labs invested in BounceBit at the end of April that same year.
Last week, Maya Protocol suffered from a hack, losing $1.7 million in crypto assets, predominantly Bitcoin. Earlier, the crypto service Coinsbuy was subjected to a hacker attack—$7.9 million was withdrawn from it.
