B² Network — Staking contract upgrade authority compromise

Timeline: On July 22–23, 2026, B² Network (a Bitcoin L2 scaling project deployed on BNB Chain) suffered unauthorized access to its B2 token staking contract's upgrade authority. The attacker replaced the proxy implementation and drained 8,591,000 B2 tokens, worth approximately $3.86M at the time. The entire haul was immediately sold via DEX for 5,409 WBNB (~$3.11M, absorbing ~$850K in slippage at ~$0.35/B2 vs ~$0.45 market price). Proceeds were then bridged to Ethereum, converted to ETH and USDT, and deposited into NEAR Intents and HOT Protocol — with investigator Specter tracking the cash-out path toward Zcash. B² suspended B2 staking immediately, announced a full security review, pledged full user compensation (affected stakers directed to open Discord tickets for unstaking), and sent the attacker an on-chain message offering legal immunity in exchange for returning at least 10% of the stolen funds ($386K) within 24 hours. No confirmation of return was reported.