On Wednesday, October 1, 2025, the official X (formerly Twitter) account of BNB Chain, previously known as Binance Smart Chain, was hacked, with the attacker using the platform to promote phishing scams. Changpeng Zhao (CZ), the former CEO of Binance, quickly issued a warning to users about the breach.
The compromised X account, which boasts over 3.8 million followers, posted multiple airdrop posts with links redirecting users to fake BNB Chain websites. These links were part of a phishing attack designed to steal personal information and credentials from users attempting to log in. The posts promoted a fraudulent "BNB HODLer Airdrop" and urged users to connect their wallets to the phishing sites.
CZ quickly responded to the situation, alerting users to the potential risks. He advised users not to click on any links coming from the hacked BNB Chain X handle, confirming that the messages contained phishing material. He specifically warned users not to connect their wallets, as the hackers were using "Wallet Connect" prompts to trick users into authorizing transactions that could drain their funds. CZ also mentioned that Binance's security teams had notified X to temporarily suspend the account and were working to restore full control.
The incident underscores the security challenges in the cryptocurrency industry, where official channels can be compromised to spread fraudulent messages. Security experts advise users to always verify domain names carefully, even when accessing links from official sources, to prevent such attacks. In this case, the links shared with the airdrop announcement redirected to a fake BNB Chain website with a different domain name.
Binance has taken immediate action to mitigate the impact of the hack. Takedown requests have been filed for all linked phishing sites, and the company is coordinating with X to remove the fraudulent posts. Binance community channels on Binance Square also issued alerts, reinforcing the call for heightened caution.
Despite the breach, the price of BNB, previously known as Binance Coin, has remained relatively stable. The token is holding above the $1,000 level, with analysts suggesting potential for upside movement.
This incident serves as a reminder of the importance of vigilance, rapid communication, and user education in protecting against evolving online threats. Crypto projects should prioritize social media security and implement measures such as rigorous approval processes, employee training, and strict access controls to safeguard their accounts and protect their users from phishing attacks and scams.
