Bonfire exploit (2026-09-15) — attacker addresses (Blackpaper BP-1274)

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Reported: 2026-10-15
  • Last updated: 2026-10-16

Bonfire incident on 2026-09-15 (Improper Access Control). BonfireSwap's BSC router moved 5.421 trillion BONFIRE from 65 external holders and extracted 66.080052 BNB from its pair, reported at about $47,400. Source: Blackpaper BP-1274 (https://blackpaper.wiki/incident/BP-1274/), in-house verified. This report lists only the addresses Blackpaper places under its Attacker addresses section; no victim wallets are included: - 0x2b5bf7d9d9dc1eec68f40c6b7a8f197e65f9731a (BSC · Sender of the exploit transaction) Confidence: Medium — single incident database (Blackpaper, on-chain verified by them);…

Other addresses in this report: 0x2b5bf7d9d9dc1eec68f40c6b7a8f197e65f9731a

Report a crypto scam · How to report a crypto scam