Inferno Group Suspected in BNB Chain’s X Account Hack

Written by Aaron S.,

Editor-In-Chief

Last Updated: October 01, 2025

Key Takeaways

On October 1, hackers took over BNB Chain’s X account and posted phishing links aimed at draining users’ cryptocurrency wallets;
Changpeng Zhao urged followers not to click the fake links, while BNB Chain worked with X to block the account and remove scam sites;
Security expert 23pds linked the attack to Inferno, a group known for phishing tools, as BNB Chain regained control at 8:26 AM UTC.

Don't miss out - BYDFi new user bonus is now LIVE! Join BYDFi & unlock up to $2,000 in rewards. Claim Bonus! 🎁

BITDEGREE IN YOUR SOCIAL FEED

On October 1, the official X account linked to BNB BNB $1,021.53 Chain was taken over by hackers.

The attackers used the compromised profile to share malicious links aimed at stealing funds from users' cryptocurrency wallets.

In a post on X, Changpeng Zhao warned people not to interact with any links shared during the breach. He pointed out that the posts led to fake websites that asked users to approve wallet connections.

What are dApps in Crypto? (Explained with Animations)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

Zhao explained that the BNB Chain team had already informed X’s support and was working to block the account and recover access. Requests had also been sent to remove the scam websites being linked in the fake posts.

An X user known as @im23pds, who works as the chief security officer at SlowMist, said that the attackers used a small visual trick, which involved swapping letters in the website link to make it look trustworthy.

According to @im23pds, the scam might be tied to a group known as Inferno, which has built a reputation for offering tools that help others run similar scams. This group operates by providing ready-made phishing pages that copy the look of real crypto services.

At 8:26 AM UTC, the BNB Chain team confirmed that they had regained control of their account.

On September 23, a security breach occurred at UXLink, a Web3-based social platform that uses artificial intelligence (AI). How? Read the full story.