Web3 Infrastructure Platform Ankr Exploited In A Multi-Million Dollar Hack

The exploited attacked the aBNBc smart contracts on the Ankr protocol while draining entire liquidity and moving funds to Tornado Cash
By Bhushan Akolkar
ETH, WBNB, USDC Stolen As Radiant Capital Suffers $50M Loss

Web3 infrastructure platform Ankr faced a massive exploit earlier today with the hacker reportedly exploiting the platform for millions of dollars. As per early details, the hacker has reportedly minted 10 trillion Ankr Reward Bearing Staked BNB (aBNBc).

aBNBc is a reward-bearing token for BNB available on the Ankr protocol. Also, details from BSCScan show that the Ankr exploited transferred 900 BNB coins to Tornado Cash.

Earlier, the BNB chain had launched the liquid staking function via Ankr. This allowed users to earn interest by allocating BNB tokens to the liquid staking agreement while obtaining aBNBc. Post the exploit, the price of aBNBc has tanked by a staggering 99.5%.

Either a vulnerability in the smart contract or a compromise in the private keys could be the reason behind the exploit. Citing data from DeBank, crypto journalist Colin Wu reports:

0x8d… took advantage of the Ankr loophole, used 10 BNB to exchange 183,384.92 aBNBc, and then converted to hBNB and staked it into Helio Protocol to lend more than $16m BHAY0 and exchanged it into HAY0. The stablecoin HAY once fell to $0.2.

Ankr Confirms the Exploit

In their latest tweet, the Web3 infrastructure platform Ankr has admitted to the exploit. It noted:

Our aBNB token has been exploited, and we are currently working with exchanges to immediately halt trading. All underlying assets on Ankr Staking are safe at this time, and all infrastructure services are unaffected.

This year has witnessed a flood of massive crypto exploits with billions of dollars of investors’ funds lost. These exploits have been quite prominent in the decentralized finance (DeFi) market.

Back in October, Binance Coins worth $100 million were stolen in a cross-bridge attack connecting BNB Beacon Chain (BEP2) and BNB Chain (BEP20 or BSC). In the same month, Solana-based decentralized finance (DeFi) protocol Mango Markets became the victim of an attack losing $100 million from its DeFi protocol.

Advertisement
Bhushan Akolkar
Bhushan is a seasoned crypto writer with over eight years of experience spanning more than 10,000 contributions across multiple platforms like CoinGape, CoinSpeaker, Bitcoinist, Crypto News Flash, and others. Being a Fintech enthusiast, he loves reporting across Crypto, Blockchain, DeFi, Global Macros with a keen understanding in financial markets. 

He is committed to continuous learning and stays motivated by sharing the knowledge he acquires. In his free time, Bhushan enjoys reading thriller fiction novels and occasionally explores his culinary skills. Bhushan has a bachelors degree in electronics engineering, however, his interest in finance and economics drives him to crypto and blockchain.
Why trust CoinGape: CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journalists and analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.
Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.