GANA Payment, a payments-focused crypto project operating on the BNB Chain, suffered a major exploit resulting in the loss of over $3.1 million. Blockchain investigator ZachXBT flagged the attack, which involved the attacker quickly consolidating stolen funds and laundering them through Tornado Cash.
The attacker deposited 1,140 BNB (worth approximately $1.04 million) into Tornado Cash on the BNB Chain, then bridged a portion to Ethereum, where 346.8 ETH (valued at around $1.05 million) was deposited into Tornado Cash again. An additional 346 ETH (roughly $1.046 million) remains in the attacker's Ethereum wallet, with no major outflows yet, suggesting potential future movements.
On-chain analysis revealed precise execution, with transaction logs on BscScan showing multiple outgoing transfers of BUSD-T and small BNB amounts, leaving the address nearly drained. The cross-chain laundering strategy highlights vulnerabilities in DeFi security, making fund recovery challenging.
The community has expressed concerns, urging GANA Payment to release a detailed post-mortem, halt affected contracts, and coordinate with exchanges. This incident underscores the importance of robust security audits and preventive measures in the crypto space.
BZIL
MOBU
VFX
BTC
NMR
GEE