GANA Payment, a Web3 payment infrastructure provider, has recently experienced a notable exploit. Particularly, the exploiter has recently taken away over $3.1M from GANA Payment on Binance Smart Chain (BSC). As per the renowned pseudonymous on-chain investigator, ZachXBT, the GANA Payment attacker commenced the heist by stealing 1,140 $BNB on BSC via Tornado Cash. Thus, the exploit has raised concerns among the community about the security vulnerabilities.
Attacker Loots GANA Payment’s $3.1M on BSC Through Tornado Cash
The market analytics reveal that GANA Payment has gone through a massive exploit where the attacker has funneled more than $3.1M on Binance Smart Chain. At the start, the attacker stole 1,140 $BNB on BSC, denoting a cumulative $1.04M. Subsequently, the attacker transferred these assets to the privacy mixer, Tornado Cash, to launder them and remove traces.
After that, the attacker bridged the stolen funds to Ethereum. There, the exploiter deposited another 346 $ETH into Tornado Cash. This amount accounts for a cumulative value of nearly $1.05M. At the moment, the exploiter reportedly retains a total of 346 $ETH, equaling almost $1.046M).
Exploiter’s Wallet Holds $1.04M in $ETH and $0.120 $BNB, Still Traceable
According to ZachXBT, one can still trace the funds to the GANA Payment exploiter’s wallet address “0x7a5…b3cca.” Currently, the wallet comprises 346.03 $ETH, wth a per-token price of approximately $1,480, along with 0.120 $BNB ($902.91). In addition to this, the wallet also contains a negligible amount of $USDT, nearly $0.000000534. (Overall, this exploit indicates the significant vulnerabilities faced by GANA Payment and other such platforms, raising requirement for adequate security measures.
