On October 30, 2021, Boy X Highspeed (BXH), a decentralized cross-chain exchange, was hit by a crippling hack that drained $139 million from its Binance Smart Chain (BSC) hot wallet, as reported by CoinDesk and Forkast. Detected at 22:00 UTC, the breach stemmed from a leaked administrator private key, potentially via a virus on BXH’s website or an inside job by a China-based technical staff member, per CEO Neo Wang’s statement to CoinDesk. Funds, including $20.8 million in BNB and $37 million in BUSD, were siphoned to the attacker’s wallet (0x62e…f4b), per PeckShield’s analysis. BXH, with $20 million daily volume per CoinMarketCap, halted withdrawals, secured assets on Ethereum, Huobi ECO Chain, and OKEx OEC, and offered a $1 million bounty for fund recovery, as announced on Twitter (@BXH_Global). Reddit’s u/DeFiWatcher speculated on insider collusion, while @CryptoInsiderX criticized BXH’s single-key reliance. PeckShield confirmed the key leak, and BXH filed a case with China’s network security police, yet no funds were recovered by April 2022, per MintDice. One of 169 blockchain hacks in 2021 totaling $7 billion, per AMBCrypto, the incident echoed Cream Finance’s $130 million loss days earlier, fueling calls for multi-signature wallets, hardware security modules, and mandatory phishing defenses to secure DeFi platforms.
Have a hack to report? Contact us. or Share this report