B² Network, a modular Bitcoin scaling solution, has become the latest project hit in an ongoing wave of cryptocurrency exploits. Attackers made off with approximately 8.59 million B2 tokens valued at roughly $3.86 million.

The incident took place on the BNB Chain, where the perpetrators drained the tokens before converting them into 5,409 Wrapped BNB (WBNB) worth approximately $3.11 million. According to blockchain security investigator Specter, the stolen assets were subsequently bridged to Ethereum and are currently being laundered through NEAR Intents en route to Zcash—a privacy-focused blockchain designed to obscure transaction trails. The use of cross-chain bridges and privacy coins during laundering has become a recurring obstacle for recovery efforts, as funds routed through such protocols can become effectively untraceable.

The team sent onchain message to the attacker pic.twitter.com/CRiOsZy6g7 — Specter (@SpecterAnalyst) July 22, 2026

In direct response to the breach, the B² Network team attempted to open negotiations with the attackers through an on-chain message. The team offered to forego legal proceedings if the perpetrators returned at least 10% of the stolen funds—approximately $386,000—to an official address within 24 hours, framing the return as a gesture of goodwill. Such on-chain plea deals have become a common first response in the DeFi sector, where projects often have limited legal recourse and treat the negotiation window as a pragmatic recovery tactic before pursuing other avenues.

Insider Access Suspected as Staking Contract Authority Was Compromised

Blockchain analysts uncovered details suggesting the exploit may have involved compromised internal credentials or an insider threat. The wallet used to drain the tokens had held the necessary privileged role since 2025, and that access was revoked only after the unauthorized transfer had already been executed.

This timeline has raised concerns about access controls and internal security protocols within the project. Observers noted that the delay in revoking permissions points to a significant operational oversight. The incident echoes a broader pattern of DeFi exploits stemming from mismanaged administrative privileges, where compromise of a single key or role grants an attacker direct control over contract logic.

It appears @BSquaredNetwork was exploited, with 8.59M $B2 ($3.86M) stolen. The exploiter sold all 8.59M $B2 for 5,409 $BNB ($3.01M). The funds were then bridged to #Ethereum, swapped for $ETH and $USDT, and deposited into NEAR Intents and HOT Protocol. pic.twitter.com/hIZdZQipxV — Lookonchain (@lookonchain) July 23, 2026

In an official statement, B² Network confirmed that the breach targeted its B2 token staking service, specifically through unauthorized access to the staking contract's upgrade authority. As a precautionary measure, the team has temporarily suspended all B2 staking operations while comprehensive security reviews are conducted.

The team emphasized that the incident has been contained and that no further impact is anticipated. B² Network pledged to fully compensate all affected users. Those wishing to unstake their tokens were directed to submit requests through the project's official Discord channel, with processing expected within one business day following ownership verification.

Today, we identified a security incident affecting our $B2 token staking service. The incident involved unauthorized access to the staking contract's upgrade authority. As a precaution, $B2 staking has been temporarily suspended while we complete additional security reviews.… — B² Network | Scaling Bitcoin (@BSquaredNetwork) July 22, 2026

The B² Network exploit was one of three major attacks recorded on the same day, contributing to a combined daily loss of $35.55 million across the cryptocurrency industry, according to data from Lookonchain. Decentralized trading platform AFX Trade suffered a $24.15 million breach, while the Verus Ethereum bridge was exploited for $7.55 million, underscoring the persistent security challenges facing the digital asset ecosystem.