Authorization Flaw Moves 286.5M BB; BounceBit Retires Chain

An authorization flaw moved about 286.5 million BB from nine accounts, prompting BounceBit to retire its standalone Layer 1 and reissue the token as a BEP-20 asset on BNB Chain. The token’s roles for gas, staking, rewards and on-chain governance tied to the old chain will not transfer one-for-one.

BounceBit traced the problem to protocol-level authorization logic inherited from the Evmos stack. That logic allowed a caller to specify another account as the funding source without the required approval. The company reported that private keys, signatures and wallets were not compromised.

Rather than attempt a patch and restart, BounceBit stopped the network and prepared a replacement ledger on BNB Chain. The snapshot cutoff for the reissue is block 20,697,260, timestamped 21:02:35 UTC on Aug. 19. Transactions recorded after that block will not carry over to the new BEP-20 ledger.

Most on-chain balances at the snapshot will be reconstructed one-for-one. Addresses holding at least 10 BB at the cutoff will automatically receive the same amount at the corresponding address on BNB Chain. Balances below 10 BB have been set aside for a later claim portal. Staked BB and tokens in unbonding were included in the snapshot even though the retired chain no longer produces blocks.

Because exchanges custody customer funds on their own ledgers, the snapshot records an exchange wallet but not individual customer records. BounceBit is coordinating directly with exchanges where the cutoff reduced a venue’s recorded balance and has asked users to await exchange announcements on trading, deposits and withdrawals.

BounceBit has deployed a new contract on BNB Chain but is withholding the contract address while exchanges complete due diligence. The company has not announced a public distribution date.

Before the shutdown, BB served five documented roles on the old chain: participation in proof-of-stake, validator staking and rewards, payment of network gas, platform currency and composability, and on-chain governance. The migration disclosures do not provide direct replacements for network gas, staking rewards or governance functions.

The company plans to pursue token utility on BNB Chain through integrations with products it identified as CeDeFi V4, Prime, Strategy, real-world asset (RWA) and promotional vaults. Detailed roadmap items and incentive designs have been deferred until after token distribution.

BounceBit said its CeDeFi and RWA businesses were not directly affected by the chain-level authorization flaw because the architecture separates custody, execution and on-chain accounting. The firm has not yet detailed how stBB, vault receipts, rewards or all redemption paths will be represented once the old ledger is abandoned.

Market data available at the time shows BB trading up about 2.29% over the past 24 hours, with a circulating supply of roughly 1.24 billion and a market capitalization near $12.6 million.