BNB Chain X Account Hacked in Latest Social Media Phishing Attack

Highlights:

• Hackers seized BNB Chain’s X account and spread phishing links to trick users into exposing their wallets.
• Security experts linked the attack to Inferno Drainer, a group known for phishing-as-a-service operations.
• BNB Chain X account hack highlights the rising risks of verified profiles being exploited by cybercriminals.

Hackers seized control of the official X account of BNB Chain on Wednesday and posted malicious links to followers. They used the compromised profile to spread phishing sites designed to trick users into connecting their wallets. Binance founder Changpeng “CZ” Zhao confirmed the hack and warned the community. He urged users not to interact with the fraudulent WalletConnect prompts. “The hacker posted links to phishing websites that ask for WalletConnect. Do not connect your wallet,” Zhao said, alerting millions of followers.

ALERT 🚨: The @BNBCHAIN X account is compromised.

The hacker posted a bunch of links to phishing websites that ask for Wallet Connect.

Do NOT connect your wallet.

Security teams have notified X already, working to suspend the account first, then restore access.

Also take-down… https://t.co/QeEnCCbFZe

— CZ 🔶 BNB (@cz_binance) October 1, 2025

Security teams from BNB Chain immediately contacted X to suspend the hacked account. They also submitted takedown requests for the phishing domains used in the scam. Although they acted quickly, the incident once again showed the risks of official social media accounts within the crypto sector.

CZ promised users that his team was working with X to ensure they gain access. The suspicious posts were later removed, but there were still doubts as to whether users had already incurred losses. The hack strengthened the manner in which malicious people keep using trusted accounts to defraud unsuspecting investors.

Phishing Tricks Exposed with Suspicions Directed at Inferno Group

Investigators discovered that the hackers used a domain trick. They replaced the letter i with l in the address of the site and made it look genuine. The malicious strategy deceived users and sent them to a counterfeit system where wallet information might be taken.

SlowMist’s chief information security officer, known as 23pds, confirmed the technique on X. He stated that attackers often use simple but effective deceptions to lure victims. He further suggested that the breach was linked to the infamous Inferno Drainer group.

太坏了这些黑客是有预谋的!

— 茄哥币富 Doge EARL (@qqzsss) October 1, 2025

Inferno Drainer runs phishing-as-a-service providers, through which affiliates deploy counterfeit websites of crypto projects. These websites gather personal keys or transmit unwarranted wallet associations. Researchers warned that the group’s affiliates have grown increasingly aggressive.

Similar account hacks have been witnessed since the start of the year. Attackers stole Pump.fun’s account in February to promote a fake governance token. In March, they misused the account of Ghana’s former president, John Mahama, to advertise a Solana-based token. They also hijacked the account of UK politician Lucy Powell in April to promote a fake coin.

The BNB market responded quickly after news of the hack. The token fell 1.83% to $1,010 before its current trading price of $1,019. Analysts at Crypto2Community earlier predicted that the coin may rally to $1,3000 once it hits a new ATH, a prediction that is playing out well.

BNB Chain X Account Hacked and Users Urged to Stay Vigilant

CZ reminded the community to verify every domain, even if links appear on verified profiles. “Always check domains carefully, even from official X handles. Stay SAFU,” he wrote. His warning emphasized that phishing attempts often look most convincing when attackers control trusted accounts. Users were provided with clear guidance to stay alert to suspicious links, report harmful postings, and keep up to date with official Binance channels. Meanwhile, investigators have not confirmed whether users lost funds.