The native blockchain of Binance Coin (BNB) and the Binance cryptocurrency exchange, BNB Chain, has undergone recent security-related changes.
The network was subjected to a multi-million dollar cross-chain exploit on Thursday, October 6. Due to the event, BNB Chain temporarily stopped all network withdrawal and deposit operations.
The network outage was initially reported as the result of "irregular activity," but later it was updated to reflect that it was "under maintenance." The CEO of Binance, Changpeng Zhao, tweeted an apology for any inconvenience caused to the BNB Chain community as the rumours were confirmed.
However, the suspension was brief, as the BNB Chain Team announced the network was back online early on Oct. 7, just hours after the attack. As the network regained activity its validators confirmed their location and were asked to upgrade the community infrastructure.
Later the same day, BNB Chain released its first official statement thanking the community for its support during the incident, along with the next steps for ensuring future network security.
In the statement, the BNB Chain Team owned up to the exploit and apologized to users. They also expressed gratitude to how quickly the issue was identified and resolved by the community.
During the Oct. 6 exploit the hacker was able to withdraw a total of 2 million BNB, which is roughly $568 million at the time of writing. This number was confirmed in the official statement released by the team.
It also reported 26 active validators on the BNB Smart Chain during the incident, with 44 in total in different time zones.
In addition to official numbers related to the incident, the BNB Chain highlighted its next steps to ensure future network security against potential exploits.
An on-chain governance vote will decide what to do with hacked funds, whether they should be frozen and if BNB Auto-Burn should be implemented to cover the remaining exploited funds.
The community will also vote on a bounty for catching hackers and a white-hat program for future bugs found which could be $1 million for each.
Prior to the official statement being released, Zhao tweeted his amazement at the swift response and transparency of the BNB Chain team.
In August a report from Chainaylsis revealed that $2 billion in crypto was stolen from cross-chain bridges in the last year alone. This includes major exploits such as the $190 million Nomad Bridge incident.
Michael Lewellen, head of solutions architecture at OpenZeppelin, told Cointelegraph that in an instance where the “project team retains some level of administrative control” in their decentralized ecosystem some type of monitoring should be implemented.
“They should have comprehensive security monitoring to ensure they can use those powers swiftly when needed.”
While community initiatives are productive, such as the ones BNB Chain proposed as a follow-up, Lewellen said real-time security monitoring is a tool that can, “put-out fires before they have a chance to spread.”
“Ultimately, the end user can follow good security practices, but without the integration of real-time monitoring and incident response by the developers, users remain at their mercy.”
According to Lewellen, real-time, ongoing security monitoring can watch over the processes that make up the decentralized space without affecting or impinging upon them. Researchers are also considering reversible crypto transactions as a viable solution to fight crime in the industry.
In a subsequent statement, BNB Chain spoke on the decentralization of their network, as many Twitter critics surfaced in light of the exploit.
One user tweeted that the network may seem decentralized to the “untrained eye” but it is indeed not:
BNB Chain responded with the statement that “decentralization is journey” and while it’s currently less decentralized than the Ethereum blockchain, it is “more decentralized than many others.”
The update went on to detail the components of the blockchain and the role Binance plays in the ecosystem. According to the post, anyone can become a network validator if enough BNB is put forward and that:
However, the debate rages on between Twitter users, with some commending the team for a swift response and others posting centralization-themed memes about the network.
Zhao also hopped into the debate, posting his thoughts on centralization vs decentralization, echoing sentiments from a similar piece he wrote three years ago:
Within less than a week of the BNB Chain exploit, the space saw another exploit with $100 million taken from the Solana decentralized finance platform Mango Markets. The Solana network is also often touted for being too centralized.
Regardless of the hack and the centralization debate, the network pushed out its latest testnet upgrade v1.1.16 on Oct. 12.