B² Network hack — July 2026
Incident facts
| Date of incident | |
|---|---|
| Publicly disclosed | July 22, 2026 |
| Target type | Token contract |
| Loss | $3,860,000Published estimates range $3,010,000 to $3,860,000Price at time of incident |
| Method | Access control flawThe upgrade authority over the B2 staking contract was exercised by someone who should not have held it; analysts note the address had carried the privileged role since 2025 |
| Chains | BNB Chain |
| Outcome | Users reimbursed |
What happened
B² Network, a Bitcoin layer-2 project, lost 8.59 million B2 tokens on 22 July 2026 when someone exercised the upgrade authority over its staking contract on BNB Chain. The tokens were worth about $3.86 million before the sale.
What the attacker actually walked away with was less. The whole position was dumped for 5,409 wrapped BNB, roughly $3.01 to $3.11 million, meaning about $850,000 evaporated into slippage and price impact on the way out. The proceeds were bridged to Ethereum, swapped into ETH and USDT, then pushed through NEAR Intents and HOT Protocol toward Zcash. Both figures are recorded here: the registry counts what left the victim's control, which is the $3.86 million of tokens, and the lower bound shows what the sale actually realised.
The team suspended staking, said the issue was contained, and committed to compensating affected users in full, with unstaking requests handled through Discord. It also sent an on-chain message offering to bring no legal proceedings if at least 10 per cent, about $386,000, came back within 24 hours.
Analysts have pointed out that the privileged address had held its role since 2025, which allows for either stolen credentials or someone on the inside. Neither has been established and no attribution has been made.
Sources
- B² NetworkPrimary · retrieved 2026-08-21
- Metaverse PostSecondary · retrieved 2026-08-21
- Crypto AdventureSecondary · retrieved 2026-08-21
Cite this
This data is published under CC BY 4.0. You may reuse it, including commercially, as long as you credit iTokenly and link back.
iTokenly Hack Registry, "B² Network hack — July 2026", iTokenly, accessed 2026-08-21, https://itokenly.com/hacks/b2-networkhttps://itokenly.com/hacks/b2-networkPermalinks never change. If an entry is renamed, the old address keeps working.
Spotted an error? Write to [email protected]. Corrections to published figures are logged on this page. See the methodology for how entries are checked.