BounceBit to shut down its L1 chain and migrate to BNB Chain after 286.5M BB exploit

BounceBit is pulling the plug on its layer-1 blockchain. Following a critical exploit that drained roughly 286.5 million BB tokens from nine accounts without a single private key being touched, the project has announced a permanent shutdown of BounceBit Chain and a full migration to BNB Chain.

What happened, exactly

Between August 19, 2026, at 21:02 UTC and August 20, 2026, at 01:54 UTC, an attacker exploited an authorization vulnerability buried inside a native Evmos module. Across 14 transactions, precisely 286,543,148 BB tokens were transferred out of nine accounts without any owner authorization. The BounceBit team detected the breach and halted block production at height 20,702,857, effectively freezing the chain in place. The exploit became public on August 21, 2026, at which point the team also contacted exchanges, requesting that affected assets be frozen while investigations continue.

The team confirmed that no private keys were compromised and no user wallets were directly breached. The vulnerability was at the protocol layer, not the wallet layer. CeDeFi strategies and vaults, which sit on separate infrastructure, were untouched.

Why shut down instead of recover

BB tokens will be reissued as BEP-20 tokens on BNB Chain. The reissue is anchored to a pre-exploit snapshot taken at block height 20,697,260, which captures the state of legitimate holdings just before the attack began. The stolen 286.5 million tokens are explicitly excluded from the new supply, meaning the attacker’s haul is effectively zeroed out in the new token economy.

Users will not need to do anything manually. The team has announced an automatic airdrop to corresponding BNB Chain addresses, and staked BB positions will be restored automatically.

What this means for BB holders and the broader market

For the CeDeFi side of BounceBit’s product suite, Bitcoin restaking strategies, yield vaults, and other off-chain or separately deployed products reportedly emerged from the exploit window without losses. The chain itself was the weak link, not the financial products running alongside it.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.