Cryptocurrency exchange Binance temporarily suspended its blockchain network after hackers made off with around $570 million worth of its BNB token.
Binance said late Thursday a cross-chain bridge linking with its BNB Chain was targeted, enabling hackers to move BNB tokens off the network. So-called cross-chain bridges are tools that allow the transfer of tokens from one blockchain to another.
The company said it had worked with network validators — entities or individuals who confirm transactions on the blockchain — to pause creation of new blocks on BSC, suspending all transaction processing while a team of developers investigates the breach.
Binance is the world’s largest crypto exchange by trading volume.
“An exploit on a cross-chain bridge, BSC Token Hub, resulted in extra BNB. We have asked all validators to temporarily suspend BSC,” Changpeng Zhao, Binance’s CEO, said in a tweet Thursday evening.
“The issue is contained now. Your funds are safe. We apologize for the inconvenience and will provide further updates accordingly.”
BNB Chain has since resumed operations.
In total, hackers drained 2 million BNB tokens — about $570 million at current prices — from the network, Binance’s BNB Chain said in a blog post on Friday.
The hack was caused by a bug in the bridge’s smart contract that allowed hackers to forge transactions and send money back to their crypto wallet, according to crypto security firm Immunefi. Smart contracts are pieces of code on the blockchain that allow agreements to execute automatically without human intervention.
“As with many bridge designs, there is one central point that holds most of the funds that are moving through the bridge,” Adrian Hetman, tech lead of the triaging team at Immunefi, told CNBC.
“Ultimately, the Bridge was tricked into giving funds from that contract.”
The value of BNB sank more than 3% Friday morning to $285.36 a coin, according to CoinMarketCap data.
An earlier estimate from the company placed the total amount withdrawn in a range of $100 million to $110 million. The company also said it managed to freeze $7 million of funds with the help of its security partners.
A Binance spokesperson told CNBC the company coordinated with BNB Chain validators to enact an upgrade. That meant that most of the funds remained in the exploiter’s crypto wallet, while about $100 million was “unrecovered.”
BNB Chain has 26 active validators at present and 44 in total in different time zones, the spokesperson added.
BNB Chain, originally known as Binance Chain, was first developed by Binance in 2019. Like other blockchains, it features a native token, called BNB, that can be traded or used in games and other applications.
A total of around $1.4 billion has been lost to breaches on cross-chain bridges since the start of 2022, according to data from blockchain analytics firm Chainalysis.
The crypto industry has had a rough year, with roughly $2 trillion in value being erased since the peak of a blistering rally from 2020 to 2021. The implosion of $60 billion blockchain venture Terra and a worsening macroeconomic environment have severely impacted market sentiment.
Ticket reseller StubHub signage on display at the New York Stock Exchange for the company’s IPO on Sept. 17, 2025.
NYSE
StubHub shares plunged 20% in extended trading on Thursday after the company reported quarterly results for the first time since its initial public offering in September.
Here’s how the ticket vendor did in comparison with LSEG consensus:
Loss per share: $4.27
Revenue: $468.1 million vs. $452 million expected
During a conference call with investors, StubHub CEO and founder Eric Baker said the company wouldn’t provide guidance for the current quarter.
Baker said that the company takes “a long term approach,” adding that the timing of when tickets go on sale can vary, making it hard to predict consumer demand. StubHub plans to offer outlook for 2026 when it reports fourth-quarter results, he said.
“The demand for live events is phenomenal,” Baker said. “We don’t see anything with consumer demand that’s any different.”
Revenue increased 8% in its second quarter from $433.8 million a year earlier, the company said.
StubHub reported a net loss of $1.33 billion, or a loss of $4.27 per share, compared to a net loss of $45.9 million, or a loss of 15 cents per share, during the same period last year. StubHub said this reflects a one-time stock-based compensation charge of $1.4 billion stemming from its IPO.
Gross merchandise sales, which represent the total dollar value paid by ticket buyers, rose 11% year over year to $2.43 billion.
The company faced tough comparisons from a year earlier, when results were boosted by Taylor Swift’s massively popular Eras Tour. Excluding that impact, StubHub said GMS grew 24% year over year.
Founded in 2000, StubHub primarily generates revenue from connecting buyers with ticket resellers. It competes with Vivid Seats, which was taken public via a special purpose acquisition company in 2021; SeatGeek; and Ticketmaster parent Live Nation Entertainment.
“We are building a truly differentiated consumer product that improves the experience for fans while unlocking better economics for venues, teams, and artists through open distribution,” Baker said in a statement. “We’re early in that journey, but our progress so far gives us great confidence in our strategy and the long-term value we’re creating.”
StubHub raised $800 million in its long-awaited IPO on the New York Stock Exchange, which came after it delayed its debut twice. The most recent stall came in April after President Donald Trump‘s announcement of sweeping tariffs roiled markets. The company restarted the process to go public in August when it filed an updated prospectus.
On Thursday, the company’s stock closed at $18.82. Shares are now down roughly 20% from the IPO price of $23.50.
The Google corporate logo hangs outside the Google Germany offices on August 31, 2021 in Berlin, Germany.
Sean Gallup | Getty Images News | Getty Images
Google said on Thursday said it has disrupted the foreign cybercriminal group behind a massive SMS text phishing operation within 24 hours of filing its lawsuit.
“This shut down of Lighthouse’s operations is a win for everyone,” said Google general counsel Halimah DeLaine Prado. “We will continue to hold malicious scammers accountable and protect consumers.”
Google filed the suit early Wednesday, seeking to dismantle the organization that some cyber experts have dubbed the “Smishing Triad,” which used a phishing kit named “Lighthouse” to generate and deploy attacks using fake texts.
The company provided translated Telegram messages allegedly posted by the group’s ringleader.
“Our cloud server has been blocked due to malicious complaints. Please be patient and we will restore it as soon as possible!” one message read.
Another message stated that “The reopening date will be announced separately.”
Google did not provide specifics on how the operation was shut down.
Read more CNBC tech news
The crime group had harmed at least 1 million victims across over 120 countries, Google said in a release.
Victims would receive texts containing malicious links to fraudulent websites designed to steal sensitive financial information, including Social Security numbers and banking credentials.
The messages often appeared as fake delivery updates, unpaid fees notifications, fraud alerts, and other texts designed to appear urgent.
“They were preying on users’ trust in reputable brands such as E-ZPass, the U.S. Postal Service, and even us as Google,” DeLaine Prado previously told CNBC.
The company said that it found over 100 templates generated by Lighthouse using the company’s branding to trick victims into thinking the sites were legitimate.
Tesla is recalling around 10,500 units of its Powerwall 2, a backup battery for residential use, according to a U.S. Consumer Product Safety Commission disclosure out Thursday.
“The lithium-ion battery cells in certain Powerwall 2 systems can cause the unit to stop functioning during normal use, which can result in overheating and, in some cases, smoke or flame and can cause death or serious injury due to fire and burn hazards,” the CPSC recall notice said.
While Elon Musk‘s electric vehicle and clean energy company blamed the issue on a “third-party battery cell defect,” it did not name the supplier.
The recall notice said Tesla previously received 22 customer reports of the Powerwall 2 overheating, including five fires resulting in “minor property damage,” but no known injuries.
Read more CNBC tech news
Tesla’s Powerwall products are sold via its Energy division, along with giant, backup batteries that are built for utility-scale projects and use at large business facilities.
The Powerwalls work with Tesla’s solar photovoltaics, or solar rooftops, and can store electricity in a home for use at a later time, including during blackouts or during days or hours when electricity prices are higher.
In a separate notice on Tesla’s website, the company emphasized that the issue does not affect owners of newer model Powerwall systems, specifically Powerwall 3. The company website also said, “all affected units are being replaced at no cost to customers.”
Tesla’s biggest growth engine in the third quarter of 2025 came from its energy division, which sells Powerwalls. Tesla Energy saw revenue jump 44% to $3.42 billion in the third quarter, and as of the end of September, its energy segment represented about one-quarter of Tesla’s overall revenue.
Tesla shares fell by more than 7% on Thursday. Representatives for Tesla did not respond to a request for comment.