A large-scale hacker attack occurred on the GANA Payment project within the BNB Smart Chain, resulting in the theft of over $3.1 million. Analysts report that the hackers quickly withdrew and moved the assets across different networks to disguise the origin of the funds.
This is reported by Finway
Hacking and Money Laundering Scheme
According to on-chain data, all stolen funds were collected at the address “0x2e8…e5c38” and primarily converted into BNB. Approximately 1140 BNB, worth around $1.04 million, were sent through the anonymization service Tornado Cash. The remaining assets were transferred to Ethereum, after which an additional 346.8 ETH (equivalent to $1.05 million) was deposited into Tornado Cash. Another 346 ETH remain at the inactive address “0x7a5…b3cca”.
Causes and Consequences of the Incident
GANA Payment is a small payment project operating on the BNB Smart Chain through decentralized exchanges and on-chain liquidity pools. The project has not undergone official security audits and lacks detailed technical documentation, so the exact cause of the vulnerability is currently unknown.
“The incident led to a sharp decline in the value of the GANA token. According to GeckoTerminal, the asset’s price dropped by more than 90% immediately after the attack. This highlighted the project’s low liquidity and high risks for investors, analysts believe.”
The attack on GANA Payment has become part of a trend of increasing criminal activity within the BNB Chain ecosystem. According to DefiLlama, cumulative losses of small projects in this network have already exceeded $100 million in 2025. Experts link most attacks to flaws in smart contracts, liquidity configuration errors, and the compromise of private keys.
Previously, Chainalysis CEO Jonathan Levin warned of the rising large-scale threats to the DeFi sector, pointing to increased activity from cybercriminals in this area.