CL8Y Asset Recovery Notice for unauthorized BNB transfers on BSC; case 20261016_001 with transaction evidence provided.
Security & Exploits ·
An on-chain asset recovery notice citing case 20261016_001 was broadcast on the BSC network, claiming that BNB associated with unauthorized transfers on 15 October 2026 had been forwarded to a specific address. The notice referenced a transaction and requested preservation of funds and records, directing contact to recovery coordinators via email or Telegram.
Documentation published on 16 October 2026 UTC detailed the flow of assets following the initial incident cutoff. The reconstruction tracked movements across multiple intermediaries: funding routed through a KuCoin-attributed address into an account labeled HACKER_A, which then distributed BNB through a forwarder to a FixedFloat-attributed hot wallet, and simultaneously bridged ETH to Ethereum where further transfers dispersed funds to six unattributed recipients. The accounting reconciled gas costs, intermediate token swaps (including a USDT-to-BNB conversion), and bridge conversions, documenting the final balances of the tracked accounts at a pinned BSC block height.
The documentation explicitly noted that no automated tests or CI checks were executed for the update and was merged as a documentation-only change at operator request. Whether the recovery process has progressed beyond the initial notice or whether the recipient address has responded remains unstated.