Exploit Postmortem

BounceBit's $3M Authorization Bug Forces It to Kill Its Own Layer 1

An unverified-account flaw in BounceBit's Evmos-based chain let an attacker drain 286.5 million BB from nine wallets — and because the underlying chain client is itself discontinued, BounceBit is retiring the L1 rather than patching it.