BXH
Hack or exploit on Sep 21, 2022 · Private Key Leakage
What happened
According to the SlowMist security team, according to the BXH Stupid Kids team’s announcement on September 23, a total of $2.5 million worth of assets and 38 million BXH tokens were stolen the night before yesterday (September 21). According to the analysis and evaluation of SlowMist MistTrack, the private key of the original owner of the BXH VaultPool contract is suspected to be stolen, and the inCaseTokensGetStuck function is called to transfer the funds in the contract to the hacker's address. The hacker's address is 0x158f...e345. Up to now, the hacker has exchanged the stolen funds to the ETH chain across the chain, and further transferred all the stolen funds to Tornado Cash, with a total transfer amount of 1865 ETH.
Details
- Date
- Sep 21, 2022
- Kind
- Hack or exploit
- Method
- Private Key Leakage
- How in
- Keys, accounts and infrastructure
- Target
- Centralized exchange
- Chains
- not stated
Reported by
Related incidents
BiFi 2022 · Hack or exploit · $2.3M
Arthur 2022 · Hack or exploit · $1.6M
Eden Network 2022 · Hack or exploit · undisclosed
FutureSwap 2022 · Hack or exploit · undisclosed
SwanBluechip, "BXH hack, Sep 21, 2022: $2.5M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht957c29a899/ (data as of 2026-10-31).