BounceBit to Sunset L1 Chain as $286.5M Exploit Forces Token Reissue
Key Takeaways
- •BounceBit is permanently shutting down its Evmos-based layer-1 blockchain after an exploit allowed roughly 286.5 million BB tokens to be moved without authorization from nine mainnet accounts.
- •The breach stemmed from a protocol-level authorization flaw, and BounceBit intends to reissue BB as a BEP-20 token on the BNB Chain.
- •BounceBit raised $6 million in seed funding from investors including Binance Labs, which rebranded as YZi Labs in early 2025, and Blockchain Capital.
- •The project states that its CeDeFi, Prime, and RWA products were unaffected by the incident, while BB trading volume has dropped to zero.
- •Key recovery details, including the snapshot date for eligible balances, exclusion of the attacker's tokens, exchange support for the swap, and the chain wind-down timeline, remain unresolved.

BounceBit has announced that it will permanently shut down its layer-1 blockchain following an exploit that enabled the unauthorized transfer of approximately 286.5 million BB tokens. The decision was first reported by crypto commentator @WuBlockchain on X, and it raises significant concerns for the project's future and its users. According to the disclosure, the breach stemmed from a protocol-level authorization flaw and has forced the project to prepare a complete reissue of BB tokens as a BEP-20 token on the BNB Chain.
What Happened
In the wake of the exploit, BounceBit outlined its plan to sunset the BounceBit Chain and transition to a new model. The attacker exploited the vulnerability to move 286.5 million BB tokens from nine mainnet accounts without authorization. The project had previously raised $6 million in a seed funding round that included investments from notable entities such as Binance Labs and Blockchain Capital; its principal backer, YZi Labs, is the investment firm formerly known as Binance Labs, which rebranded in early 2025. Despite the setback, BounceBit has assured users that its CeDeFi, Prime, and RWA products remain unaffected, a notable carve-out given that BounceBit's core pitch was a CeDeFi model pairing centralized finance venues with on-chain yield products.
Retiring an entire layer-1 network is a rare response in the industry. Most projects hit by large exploits, typically bridge or protocol hacks, resume operations after patching the vulnerability and publishing reimbursement plans. Chain-level interventions of this magnitude have historical precedent, most famously Ethereum's 2016 hard fork after The DAO hack, which split the network into Ethereum and Ethereum Classic. BounceBit's Evmos-based chain, built with Cosmos SDK tooling to run Ethereum-compatible smart contracts, will instead be wound down entirely.
Market Snapshot
BounceBit's trading volume currently stands at $0, reflecting the significant impact of the exploit on market activity. The broader cryptocurrency market is showing mixed signals, suggesting that while some assets may recover, others, like BounceBit, face challenges in regaining investor confidence. The absence of trading volume indicates hesitancy among investors to engage with the token amid ongoing uncertainty.
BounceBit is a blockchain project backed by YZi Labs that aims to innovate within the DeFi space. The exploit has highlighted vulnerabilities within its Evmos-based chain, prompting regulatory scrutiny and raising questions about the security of similar decentralized platforms. The closure of its L1 chain points to a broader issue of trust and security across the cryptocurrency landscape. Migrating BB to a BEP-20 token would also change the asset's role: rather than serving as the native gas and staking asset of its own network, the token would run on top of BNB Chain and rely on that network's validators for transaction security.
The Road Ahead
Attention now turns to how BounceBit's transition to a BEP-20 token on the BNB Chain unfolds and how the market responds to the reissue. Key unresolved details include the snapshot or record date used to determine eligible balances, how tokens moved by the attacker will be excluded from the reissue, whether exchanges will support the swap, and the timeline for winding down the original chain. Future announcements regarding partnerships or integrations that could help restore confidence are expected to be closely watched as the project works through its recovery and the wind-down of the L1 chain.