Hack history / 2026 / Hack or exploit
BounceBit
Hack or exploit on Aug 19, 2026 · Improper Access Control
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$3M
dollars at the time
Returned
none listed
as the sources state it
Rank
#588
among thefts by dollars lost
What happened
BounceBit Chain was exploited through an authorization flaw in a protocol-level module inherited from the Evmos stack. A function supporting vesting/lockup operations allowed the caller to specify another account as the source of funds without correctly verifying that the source account had authorized the debit. The attacker used this flaw to transfer 286.54M BB from nine accounts without stealing private keys or forging signatures. BounceBit subsequently halted the chain and decided to retire its Layer 1 and reissue BB on BNB Chain from a pre-exploit snapshot
Details
- Date
- Aug 19, 2026
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- Chain
- Chains
- BounceBit, Bitcoin, Ethereum, BNB Chain
Related incidents
SUPERFORTUNE AI 2026 · Hack or exploit · $15.2M
Crypto DAO 2026 · Hack or exploit · $8.2M
Coinsbuy 2026 · Hack or exploit · $7.9M
New Market Trading 2026 · Hack or exploit · $4M
MANTRA Chain 2026 · Hack or exploit · $3.6M
Crypto DAO 2026 · Hack or exploit · $8.2M
Coinsbuy 2026 · Hack or exploit · $7.9M
New Market Trading 2026 · Hack or exploit · $4M
MANTRA Chain 2026 · Hack or exploit · $3.6M
Cite this page
SwanBluechip, "BounceBit hack, Aug 19, 2026: $3M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htd7a50f892c/ (data as of 2026-10-31).