”,
// 2
”+
‘
‘+
‘🚀 Advanced Platform. Real Opportunities.
‘+
‘Access deep liquidity, fast execution, and powerful order types. Start today.‘+
‘
‘+
”,
// 3
”+
‘
‘+
‘📈 Make Every Move Count
‘+
‘From spot to advanced trading tools, unlock a professional-grade experience in minutes.‘+
‘
‘+
”,
// 4
”+
‘
‘+
‘🧠 Smart Tools for Serious Traders
‘+
‘Set precise entries, manage risk, and act faster with pro features. Join now.‘+
‘
‘+
”,
// 5
”+
‘
‘+
‘⚡ Speed, Depth, Control
‘+
‘Tap into high-performance trading with robust charting and order execution.‘+
‘
‘+
”,
// 6
”+
‘
‘+
‘💼 Built for Professionals
‘+
‘Leverage advanced analytics and a wide selection of assets. Get started now.‘+
‘
‘+
”,
// 7
”+
‘
‘+
‘📊 Precision Trading, Simplified
‘+
‘Powerful charts, alerts, and order controls designed to help you execute with confidence.‘+
‘
‘+
”,
// 8
”+
‘
‘+
‘🔒 Secure. Efficient. Professional.
‘+
‘Experience a reliable environment to trade the markets your way—anytime.‘+
‘
‘+
”
];
var adplace = document.getElementById(“ads-binance”);
if (adplace) {
// Persist & rotate creatives per session
var sessIndex = parseInt(sessionStorage.getItem(“adsindexProEx”), 10);
var idx = Number.isInteger(sessIndex) ? sessIndex : Math.floor(Math.random() * adscodesPro.length);
adplace.innerHTML = adscodesPro[idx];
// Cycle next index
var next = (idx === adscodesPro.length – 1) ? 0 : idx + 1;
sessionStorage.setItem(“adsindexProEx”, next);
}
})();
BNB Chain’s verified X account was compromised and used to post phishing links that mimic WalletConnect pages; the attack is tied to the Inferno Drainer phishing group and targeted users’ wallets—do NOT connect your wallet to any links from the compromised posts.
BNB Chain X account compromised and used to distribute WalletConnect phishing links
Attackers used look‑alike domains by swapping letters to imitate official sites
‘+
”,// 2
”+
‘‘+
‘📈 Trade Smarter, Not Harder
‘+
‘Advanced charts, precise orders, and real-time insights—start now.‘+
‘‘+
”,// 3
”+
‘‘+
‘💼 Built for Active Traders
‘+
‘Access robust analytics, swift execution, and a wide range of markets.‘+
‘‘+
”,// 4
”+
‘‘+
‘⚡ Speed, Control, Precision
‘+
‘Set entries, manage risk, and act on opportunities in seconds.‘+
‘‘+
”,// 5
”+
‘‘+
‘🧠 Pro Tools for Clear Decisions
‘+
‘Alerts, order controls, and analytics designed for disciplined execution.‘+
‘‘+
”,// 6
”+
‘‘+
‘📊 Elevate Your Strategy
‘+
‘From scalping to swing, harness data-driven trading with ease.‘+
‘‘+
”,// 7
”+
‘‘+
‘🔒 Reliable. Efficient. Pro-Ready.
‘+
‘Trade your plan in a stable, high-performance environment—anytime.‘+
‘‘+
”,// 8
”+
‘‘+
‘🧭 Navigate Volatility with Confidence
‘+
‘Use advanced order types and risk tools to stay in control.‘+
‘‘+
”
];var adplace = document.getElementById(“ads-gateio”);
if (adplace) {
// Persist & rotate creatives per session
var sessIndex = parseInt(sessionStorage.getItem(“adsindexGateio”), 10);
var idx = Number.isInteger(sessIndex) ? sessIndex : Math.floor(Math.random() * adscodesGateio.length);
adplace.innerHTML = adscodesGateio[idx];// Cycle next index
var next = (idx === adscodesGateio.length – 1) ? 0 : idx + 1;
sessionStorage.setItem(“adsindexGateio”, next);
}
})();
Inferno Drainer attribution: phishing‑as‑a‑service active since 2022; nearly 4M followers exposed
BNB Chain hacked: verified X account posted phishing WalletConnect links—don’t connect wallets. Read how to verify domains and stay safe now.
SlowMist’s chief security officer said the phishing domains behind BNB Chain’s compromised X account are tied to the notorious Inferno Drainer group.
‘+
”,
// 2
”+
‘
‘+
‘⚡ High-Performance Futures Trading
‘+
‘Trade with deep liquidity, precise controls, and real-time insights.‘+
‘
‘+
”,
// 3
”+
‘
‘+
‘🧠 Smarter Strategies. Better Execution.
‘+
‘Build positions with leverage responsibly and manage risk with pro-grade tools.‘+
‘
‘+
”,
// 4
”+
‘
‘+
‘🚀 Futures Opportunities, 24/7
‘+
‘Go long or short with confidence. Execute fast and stay in control.‘+
‘
‘+
”,
// 5
”+
‘
‘+
‘📊 Precision Tools for Volatile Markets
‘+
‘Set entries, define stops, and automate alerts for your edge.‘+
‘
‘+
”,
// 6
”+
‘
‘+
‘💼 Built for Serious Futures Traders
‘+
‘Institutional-grade charts, risk controls, and swift order routing.‘+
‘
‘+
”,
// 7
”+
‘
‘+
‘🧭 Navigate Volatility with Control
‘+
‘Hedge, speculate, and rebalance with flexible leverage options.‘+
‘
‘+
”,
// 8
”+
‘
‘+
‘🔒 Secure. Efficient. Futures-Ready.
‘+
‘Trade your plan with reliable execution and comprehensive analytics.‘+
‘
‘+
”
];
var adplace = document.getElementById(“ads-bitget”);
if (adplace) {
// Persist & rotate creatives per session
var sessIndex = parseInt(sessionStorage.getItem(“adsindexBitgetFuts”), 10);
var idx = Number.isInteger(sessIndex) ? sessIndex : Math.floor(Math.random() * adscodesBitget.length);
adplace.innerHTML = adscodesBitget[idx];
// Cycle next index
var next = (idx === adscodesBitget.length – 1) ? 0 : idx + 1;
sessionStorage.setItem(“adsindexBitgetFuts”, next);
}
})();
What happened when BNB Chain’s official X account was compromised?
BNB Chain hacked when attackers gained access to its verified X account and posted phishing links that asked users to connect wallets via fake WalletConnect prompts. The posts were shared from an account with nearly four million followers and were used to drive traffic to look‑alike domains designed to drain wallets.
Source: Changpeng Zhao
How did attackers disguise phishing domains to trick users?
Attackers used homograph-style tricks—swapping visually similar letters such as the letter “i” for “l”—to make phishing domains appear legitimate. SlowMist’s chief information security officer (handle: 23pds) flagged the domain manipulation and linked the infrastructure to the Inferno Drainer phishing‑as‑a‑service network, which has supplied turnkey wallet‑draining sites since 2022.
Binance founder Changpeng “CZ” Zhao confirmed the compromise and warned followers not to interact with malicious posts asking for WalletConnect approvals. Zhao said takedown requests for the phishing domains have been submitted and that BNB Chain’s security teams are coordinating with platform operators to restore the account.
‘+
”,
// 2
”+
‘
‘+
‘📈 Trade With Confidence
‘+
‘Spot, margin, and precision tools to take control of your strategy.‘+
‘
‘+
”,
// 3
”+
‘
‘+
‘🧠 Smarter Tools. Better Decisions.
‘+
‘Use alerts, depth analytics, and risk controls to act faster.‘+
‘
‘+
”,
// 4
”+
‘
‘+
‘⚡ Fast Execution, Deep Liquidity
‘+
‘Enter and manage positions with speed and precision—anytime.‘+
‘
‘+
”,
// 5
”+
‘
‘+
‘📊 Precision Trading Made Simple
‘+
‘Clean UI, powerful charts, and flexible order controls for your edge.‘+
‘
‘+
”,
// 6
”+
‘
‘+
‘💼 Built for Active Traders
‘+
‘Analytics, watchlists, and risk tools to support your plan—start today.‘+
‘
‘+
”,
// 7
”+
‘
‘+
‘🔔 Never Miss the Move
‘+
‘Set custom alerts, define entries and exits, and execute with confidence.‘+
‘
‘+
”,
// 8
”+
‘
‘+
‘🔒 Secure. Efficient. Pro-Ready.
‘+
‘Trade your strategy with reliable performance and comprehensive tools.‘+
‘
‘+
”
];
// Mount point & rotation state (renamed keys, no brand in ids/keys)
var MOUNT_ID = “ads-unit-alpha”;
var ROT_KEY = “rot_alpha_index_v1”;
var mount = document.getElementById(MOUNT_ID);
if (mount) {
var saved = parseInt(sessionStorage.getItem(ROT_KEY), 10);
var idx = Number.isInteger(saved) ? saved : Math.floor(Math.random() * creativesPool.length);
mount.innerHTML = creativesPool[idx];
var next = (idx === creativesPool.length – 1) ? 0 : idx + 1;
sessionStorage.setItem(ROT_KEY, next);
}
})();
How can users verify WalletConnect links and avoid scams?
Verify domains by checking spelling precisely, viewing full URLs, and confirming official announcements from project channels. Do NOT approve any WalletConnect popups from unexpected sources. If in doubt, close the page and access the official project website via a bookmarked or directly typed URL.
Source: 23pds
Frequently Asked Questions
At the time of reporting, the phishing posts were removed from public view, but it was unclear whether any users connected wallets or suffered losses. A BNB Chain team member said the team is investigating and will share updates shortly. Cointelegraph and other outlets reported on the incident; SlowMist and CZ provided public alerts on X.
One of the phishing links shared by malicious attackers. Source: X
What is the Inferno Drainer and why is it important?
The Inferno Drainer is a phishing‑as‑a‑service platform that supplies affiliates with ready‑made wallet‑draining sites that mimic legitimate crypto project interfaces. Active since around 2022, the toolset has been linked to multiple high‑impact credential and wallet‑drain incidents.
Key Takeaways
- Account takeovers are high risk: Verified social accounts can be exploited to reach large audiences quickly.
- Domain checks prevent scams: Always inspect URLs closely—homograph tricks are common.
- Immediate response matters: Revoke approvals and move funds if you suspect compromise.
How to check a suspicious WalletConnect link (HowTo)
Follow these steps to validate a WalletConnect prompt and reduce risk.
Conclusion
BNB Chain hacked refers to a verified social account compromise used to spread phishing WalletConnect links linked to Inferno Drainer. Users should verify domains carefully, revoke suspicious wallet approvals, and follow official project updates. COINOTAG will monitor developments and publish updates as the investigation progresses.
‘+
”,
// 2
”+
‘
‘+
‘Advanced Platform. Clear Control.
‘+
‘Define entries and exits precisely with robust risk management features.‘+
‘
‘+
”,
// 3
”+
‘
‘+
‘Speed Meets Liquidity
‘+
‘Execute with confidence using reliable order routing and depth analytics.‘+
‘
‘+
”,
// 4
”+
‘
‘+
‘Pro-Grade Features, Simplified
‘+
‘Clean UI, alerting, and advanced order types designed for active traders.‘+
‘
‘+
”,
// 5
”+
‘
‘+
‘Execute with Discipline
‘+
‘Leverage risk tools, watchlists, and analytics to stay in control.‘+
‘
‘+
”,
// 6
”+
‘
‘+
‘24/7 Opportunities, One Interface
‘+
‘Build, adjust, and manage positions efficiently—anytime.‘+
‘
‘+
”
];
// Mount and rotation state (new keys, no brand)
const MOUNT_NODE_ID = “promo-slot-x”;
const STORAGE_KEY = “cr_rot_seed_x”;
const mount = document.getElementById(MOUNT_NODE_ID);
if (!mount) return;
// Rotate consistently within the session
const savedIndex = parseInt(sessionStorage.getItem(STORAGE_KEY), 10);
const idx = Number.isInteger(savedIndex)
? savedIndex
: Math.floor(Math.random() * CREATIVE_SET.length);
mount.innerHTML = CREATIVE_SET[idx];
// Next index for subsequent loads
const next = (idx + 1) % CREATIVE_SET.length;
sessionStorage.setItem(STORAGE_KEY, String(next));
})();