Attacker Drains $650,000 From ChainConnect Bridge On Ethereum, BNB Chain, Polygon And Avalanche
An attacker exploited ChainConnect on July 26, stealing approximately $650,000 in assets through unauthorized access to an unverified smart contract deployed across the network.
The protocol bridges tokens on Ethereum, BNB Smart Chain, Polygon and Avalanche. The attacker consolidated the stolen funds to a single wallet address, diverting a portion to the Tornado Cash privacy mixer while the remainder remains in the wallet.
From the sources (2 posts)
@officer_secretA portion of the stolen funds was transferred to Tornado Cash. The remaining assets continue to be held at the following address: 0xd86cbC1892BFDa05f3D7e6C17C71709b6AE957a5 Below I will post how anyone can demix TC transactions ⬇️
@noxosintel🧵 On July 26th, ChainConnect was exploited. Using unauthorized access, the attacker made off with ~$650K across Ethereum, BNB Smart Chain, Polygon, and Avalanche. @aml_crypto did an outstanding job taking on the case and running a full inv