OKLink chain guard team released a case analysis on the BNB Chain theft case. When tracking the BNB Chain theft case through the OKLink browser, it was found that the hackers used the ChangeNOW service to transfer to the BNB Chain on October 6th. More than 100 BNB (as the initial attack funds) were added to the BNB Chain, and then the hacker registered by calling the system RelayerHub contract 0x1006, and then launched an attack on the system CrossChain contract 0x2000. According to the analysis of the Chain Guardian team, the hacker launched an attack on the BNB Chain cross-chain bridge. The two attacks totaled 2 million BNBs and transferred them to the address starting with 0x489A, and mortgaged 900,000 BNBs through Venus’ lending service. Borrow 50 million USDT, 62.5 million BUSD and 35 million USDC. Subsequently, the hacker used the Stargate cross-chain bridge to transfer about 90 million US dollars of capital assets from the attack to ETH (accounting for 58%), Fantom (accounting for 33%) and AVAX and other networks. Finally, at 6:19 BNB Chain officially announced BNB Chain is suspended. Foresight News previously reported that the balance of the BNB Chain hacker address marked "Hack" exceeded $700 million.