Key Takeaways:
- BSC Chain-based DeFi protocol GANA Fee has suffered a large safety breach, leading to greater than $3.1 million in ETH and BNB stolen from the platform.
- Investigation by on-chain sleuth ZachXBT revealed that the perpetrator first transferred $1.04 million in BUSD-T to a BSC tackle, earlier than swapping the tokens for 1,140 BNB, which have been then deposited on the token mixer platform, Twister Money.
- The second transaction concerned bridging the remaining funds to Ethereum, then transferring 346.8 ETH, value $1.04 million, to Twister Money to obscure any breadcrumbs. A further 346 ETH stays dormant within the hacker’s pockets.
- GANA Fee is but to supply a autopsy report on the incident. The platform is comparatively small and now provides to a rising listing of mid-sized BSC tasks which have been exploited in 2025.
Decentralized finance (DeFi) platform GANA Fee has grow to be the newest sufferer of a safety exploit, after a large breach throughout its Binance Sensible Chain and Ethereum token swimming pools resulted in $3.1 million value of funds stolen.
GANA Fee Hacker Transfers $1.04 Million Every in ETH and BNB to Twister Money, Continues to Maintain 346 ETH
Based on on-chain sleuth ZachXBT, the hack unfolded with precision timing and cautious execution, with the perpetrators first transferring tokens value roughly $1.04 million to a BSC tackle to be swapped into BNB. From there, 1,140 BNB was deposited into the token mixer platform Twister Money on the BSC community in an try and obscure the switch.
The hacker didn’t cease there. They bridged the remaining stolen funds to Ethereum earlier than depositing a further 346.8 ETH ($1.04 million) into Twister Money, successfully destroying any path.
ZachXBT’s investigation confirmed a recurring pattern, with the attacker gaining preliminary entry via Gana’s BNB Chain infrastructure, then rapidly draining funds from token swimming pools to completely different wallets, transferring them to privateness instruments, bridging property throughout completely different blockchains to lose path, and strategically utilizing token mixing companies to obscure possession. Twister Money often serves as the ultimate traceable vacation spot of stolen crypto.
On-chain transaction logs from BscScan present seven outgoing transactions from the attackers’ BSC tackle. These included a number of transfers of BUSD-T and small quantities of BNB at charges so low that they’re barely registered. This tackle now holds lower than 0.01 BNB (>$10).
In the meantime, their Ethereum tackle, which at present holds 346 ETH, has had just one main interplay since receiving the bridged funds, which was an approval transaction for USDT. This implies that the hacker could also be timing their subsequent transfer.
Gana Fee is a comparatively new and small DeFi funds platform deployed on the BSC community. The undertaking, which operates via decentralized exchanges (DEXs) and on-chain liquidity swimming pools, has offered little public technical documentation. Gana is but to supply the outcomes of any formal audits or detailed safety supplies on the exploit. Additional data on the platform’s underlying vulnerability stays unavailable at press time.
The platform’s native BEP-20 normal token, GANA, has tumbled greater than 90% following the incident.
Binance Sensible Chain-Based mostly DeFi Tasks Have Seen Over $100 Million in Losses From Exploits in 2025
The hack is the newest case in a rising listing of mid-sized exploits which have been taking place on the BNB Chain this 12 months. Based on information from DefiLlama, smaller decentralized finance (DeFi) tasks on the blockchain have collectively suffered losses of over $100 million due to numerous exploits in 2025. A number of incidents, such because the Future Protocol hack, stemmed from a mixture of good contract vulnerabilities, liquidity pool drains, and personal key compromise assaults.
Safety analysts have urged the GANA Fee crew to launch an in depth autopsy report on the hack as quickly as attainable. They’ve additionally been urged to halt any compromised contracts, alert customers of the incident, and coordinate with crypto exchanges to flag any suspicious pockets exercise to get well the funds.
The hacker nonetheless holds over $1 million in ETH, however whether or not that quantity might be moved or just be consolidated of their pockets stays unclear. Investigators akin to ZachXBT proceed to observe the wallets for any new exercise.
The case remains to be growing, and we’ll present additional updates in subsequent articles.