Audit log

Every state-changing event for B² Network: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-07-25 23:33:39Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   2MPAfMbSE8oG…Cn9AqSsCcopysha256 → base58

   verifying row…

   canonical bytes (21710 B) ▸

   {"actor":"system:backfill","investigation_id":"a74775a0-4393-49f0-941c-daae5e6e1518","kind":"publish","page_slug":"b2-network","published_at":"2026-07-25T23:33:39.165Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"B² Network","sections":[{"content":"On July 22, 2026, at approximately 21:30 UTC, B² Network's BNB Chain staking contract was drained of 8.59 million B2 tokens, valued at approximately $3.86 million. The attacker gained unauthorized access to the staking contract's upgrade authority — the administrative permission that governs how the contract can be rewritten. B² Network confirmed the incident in an official post on X (formerly Twitter), stating: 'The incident involved unauthorized access to the staking contract's upgrade authority. As a precaution, $B2 staking has been temporarily suspended while we complete additional security reviews. The issue has been contained, and we do not expect any further impact.' The stolen tokens represented approximately 4.1% of B2's total capped supply of 210 million tokens. The attacker sold the 8.59 million B2 tokens for approximately 5,409 WBNB (worth ~$3.01–3.11 million), incurring an estimated $850,000 in price impact slippage, with an average sale price of ~$0.35 per token against a pre-attack market price of ~$0.45. Blockchain analytics firm Lookonchain traced the on-chain activity following the token transfer to the attacker-controlled address.","heading":"Security Exploit — July 22–23, 2026","severity":"critical","sources":[{"credibility":1,"name":"B² Network official statement on X","type":"official","url":"https://x.com/BSquaredNetwork/status/2080077286238454109"},{"credibility":2,"name":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"credibility":2,"name":"B² Network Hit by 8.59M B2 Token Drain Worth $3.86M — CryptocurrencyHelp","type":"news_article","url":"https://cryptocurrencyhelp.com/news/b2-network-hit-by-8-59m-b2-token-drain-worth-3-86m/"},{"credibility":2,"name":"B² Network Faces $3.86 Million Token Drain As Attacker Sells 8.59M B2 — CryptoAdventure","type":"news_article","url":"https://cryptoadventure.com/b%C2%B2-network-faces-3-86-million-token-drain-as-attacker-sells-8-59m-b2/"}]},{"content":"The root cause of the exploit was unauthorized access to the staking contract's upgrade authority. Upgradeable smart contracts on EVM-compatible chains contain an administrative role that can alter the contract's logic. If that role is compromised, an attacker can 'rewrite the rules' of the contract without requiring a conventional code vulnerability. According to Lookonchain, no underlying cryptographic flaw was needed — the attacker exploited the administrative permission layer directly. Reports from multiple outlets note that the wallet responsible for the token drain had been granted privileged access since 2025, and permissions were only revoked after the theft had already occurred. This timeline led observers to raise questions about possible insider involvement or severely inadequate key management practices, though no confirmed evidence of insider action has been publicly established. The B² Network team had not published a formal post-mortem or independent security firm audit report as of the time of publication.","heading":"Attack Vector — Upgrade Authority Compromise","severity":"critical","sources":[{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"credibility":2,"name":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"credibility":2,"name":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/two-ethereum-bridges-lose-31-7m-within-hours-as-third-protocol-halts-staking/"}]},{"content":"Following the token drain, the attacker executed a multi-step cross-chain laundering sequence. The 8.59 million B2 tokens were first converted to approximately 5,409 WBNB on BNB Chain. The BNB proceeds were then bridged from BNB Chain to Ethereum, where they were swapped into ETH and USDT. From Ethereum, the funds were deposited into NEAR Intents and the HOT Protocol, cross-chain routing services that facilitate transfers across multiple chains. According to blockchain security investigator Specter, the funds are being routed toward Zcash, a privacy-focused blockchain that obscures transaction trails, making further asset recovery significantly more difficult. The use of NEAR Intents and Zcash as the laundering path is described as a deliberate obfuscation strategy. Lookonchain reported on the BNB Chain leg of the transaction; the cross-chain routing through NEAR Intents toward Zcash was separately attributed to investigator Specter in reporting by multiple outlets.","heading":"Fund Movement and Laundering Path","severity":"critical","sources":[{"credibility":2,"name":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"credibility":2,"name":"DeFi loses $35M in a day: Are 'bounties' inviting more hacks? — Protos","type":"news_article","url":"https://protos.com/defi-loses-35m-in-a-day-are-bounties-inviting-more-hacks/"},{"credibility":2,"name":"B² Network Hit by 8.59M B2 Token Drain Worth $3.86M — CryptocurrencyHelp","type":"news_article","url":"https://cryptocurrencyhelp.com/news/b2-network-hit-by-8-59m-b2-token-drain-worth-3-86m/"}]},{"content":"Following the exploit, B² Network suspended B2 staking operations as a precautionary measure and committed to fully compensating all affected users. The team sent an on-chain message to the attacker offering legal immunity in exchange for returning at least 10% of the stolen funds ($386,000), with the condition that no legal proceedings would be initiated if the threshold were met. This 10% white-hat bounty offer follows a pattern seen across the same-day exploit cluster, though security analysts at Protos noted that increasingly generous bounty terms risk functioning as an incentive for malicious activity rather than discouraging it. Affected users were directed to submit unstaking requests through B² Network's official Discord server, with verification expected to be processed within one business day. As of July 24, 2026, no completed restitution was documented in public reporting, nor had the attacker accepted the bounty offer.","heading":"Team Response and User Compensation","severity":"high","sources":[{"credibility":1,"name":"B² Network official statement on X","type":"official","url":"https://x.com/BSquaredNetwork/status/2080077286238454109"},{"credibility":2,"name":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"credibility":2,"name":"DeFi loses $35M in a day: Are 'bounties' inviting more hacks? — Protos","type":"news_article","url":"https://protos.com/defi-loses-35m-in-a-day-are-bounties-inviting-more-hacks/"},{"credibility":2,"name":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/two-ethereum-bridges-lose-31-7m-within-hours-as-third-protocol-halts-staking/"}]},{"content":"The B² Network exploit was one of three major DeFi security incidents occurring within approximately six hours on July 22–23, 2026, which Lookonchain described as 'Hackers' Day.' The combined losses across the three incidents totaled $35.55 million. The other two incidents were: (1) AFX Trade, a perpetuals exchange whose Arbitrum bridge was drained of $24.15 million via alleged compromised validator keys; and (2) the Verus Ethereum Bridge, which lost $7.54 million in a second exploit within two months, having previously been attacked in May 2026 for approximately $11 million. CoinDesk and Protos both reported that none of the three exploits broke underlying cryptographic primitives — each involved compromised administrative keys, seized permissions, or logic flaws where the smart contract executed as designed but governance controls failed. Security researchers noted these incidents reflect systemic weaknesses in how trust is delegated and upgrade authority is managed across cross-chain infrastructure.","heading":"Broader Attack Cluster — 'Hackers' Day' July 22–23, 2026","severity":"high","sources":[{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"credibility":2,"name":"Three hacks today result in a $35.55M loss — KuCoin","type":"news_article","url":"https://www.kucoin.com/news/flash/three-hacks-today-result-in-35-55m-loss"},{"credibility":2,"name":"DeFi loses $35M in a day: Are 'bounties' inviting more hacks? — Protos","type":"news_article","url":"https://protos.com/defi-loses-35m-in-a-day-are-bounties-inviting-more-hacks/"},{"credibility":3,"name":"$35 Million Drained In Six Hours. The Bridges Learned Nothing. — The Wolf Den (Substack)","type":"news_article","url":"https://thewolfden.substack.com/p/35-million-drained-in-six-hours-the"}]},{"content":"B² Network (ticker: B2) was founded in November 2022 as a Bitcoin Layer-2 scaling solution. The project describes itself as the first EVM-compatible rollup based on zero-knowledge proof verification commitment on the Bitcoin network. Its stated components include B² Rollup, B² Hub (a Bitcoin Data Availability layer), and MiningSquared (a Bitcoin mining pool product). The project has raised venture funding from Antalpha, IDG Capital, HashKey Capital, KuCoin Ventures, OKX Ventures, Waterdrip Capital, ABCDE Capital, Animoca Brands, and others, with a seed round closing around January 2024. The B2 token conducted its initial DEX offering (IDO) on April 30, 2025, at $0.0714 via Binance Wallet, raising $300,000. The total token supply is capped at 210 million B2 tokens, of which 10% (21 million) was allocated to investors. The token reached an all-time high of approximately $2.11 on October 26, 2025. By the time of the July 2026 exploit, B2 was trading near $0.32–0.45, reflecting a decline of approximately 75–85% from its ATH. The 8.59 million tokens drained represented approximately 4.1% of total supply. Vietnamese-language reporting (Coin68) noted that B2 token prices fell approximately 30% following news of the exploit.","heading":"Project Background and Token Economics","severity":"medium","sources":[{"credibility":1,"name":"B² Network Tokenomics — Official Docs","type":"official","url":"https://docs.bsquared.network/b2_tokenomics"},{"credibility":2,"name":"BSquared Network Price: B2/USD — CoinGecko","type":"other","url":"https://www.coingecko.com/en/coins/bsquared-network"},{"credibility":2,"name":"B² Network (Bsquared Network) — ICO Analytics","type":"research","url":"https://icoanalytics.org/projects/b2-network/"},{"credibility":2,"name":"B² Network Faces $3.86 Million Token Drain As Attacker Sells 8.59M B2 — CryptoAdventure","type":"news_article","url":"https://cryptoadventure.com/b%C2%B2-network-faces-3-86-million-token-drain-as-attacker-sells-8-59m-b2/"}]},{"content":"The exploit exposed significant weaknesses in B² Network's administrative key governance. The upgrade authority on the BNB Chain staking contract is a privileged role that, if compromised, allows unilateral rewriting of contract logic without requiring access to user private keys or funds directly. Reports indicate the attacker wallet had been granted privileged access since at least 2025, and that permissions were revoked only after the theft was completed. CryptoSlate characterized the incident as a 'control failure' at the upgrade authority level, distinguishing it from bridge infrastructure exploits affecting Verus and AFX on the same day. The B² Network had not published a formal incident report or independent third-party security review as of July 24, 2026. The absence of time-locked upgrade mechanisms, multi-signature requirements, or a public disclosure of key management practices represents a governance gap that contributed to the severity of the incident.","heading":"Governance and Key Management Risk","severity":"high","sources":[{"credibility":2,"name":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/two-ethereum-bridges-lose-31-7m-within-hours-as-third-protocol-halts-staking/"},{"credibility":2,"name":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"}]}],"sources_used":[{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"credibility":1,"name":"B² Network official statement on X (Twitter)","type":"official","url":"https://x.com/BSquaredNetwork/status/2080077286238454109"},{"credibility":1,"name":"B² Network Tokenomics — Official Documentation","type":"official","url":"https://docs.bsquared.network/b2_tokenomics"},{"credibility":2,"name":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"credibility":2,"name":"B² Network Hit by 8.59M B2 Token Drain Worth $3.86M — CryptocurrencyHelp","type":"news_article","url":"https://cryptocurrencyhelp.com/news/b2-network-hit-by-8-59m-b2-token-drain-worth-3-86m/"},{"credibility":2,"name":"B² Network Faces $3.86 Million Token Drain As Attacker Sells 8.59M B2 — CryptoAdventure","type":"news_article","url":"https://cryptoadventure.com/b%C2%B2-network-faces-3-86-million-token-drain-as-attacker-sells-8-59m-b2/"},{"credibility":2,"name":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/two-ethereum-bridges-lose-31-7m-within-hours-as-third-protocol-halts-staking/"},{"credibility":2,"name":"DeFi loses $35M in a day: Are 'bounties' inviting more hacks? — Protos","type":"news_article","url":"https://protos.com/defi-loses-35m-in-a-day-are-bounties-inviting-more-hacks/"},{"credibility":2,"name":"Three hacks today result in a $35.55M loss — KuCoin","type":"news_article","url":"https://www.kucoin.com/news/flash/three-hacks-today-result-in-35-55m-loss"},{"credibility":2,"name":"Bitcoin, Ethereum-Linked Protocols Lose $35 Million in Coordinated Attacks — NFT Plazas","type":"news_article","url":"https://nftplazas.com/bitcoin-ethereum-linked-protocols-lose-35m-coordinated-defi-attacks/"},{"credibility":2,"name":"BSquared Network Price: B2/USD Live Price Chart — CoinGecko","type":"other","url":"https://www.coingecko.com/en/coins/bsquared-network"},{"credibility":2,"name":"B² Network (Bsquared Network) — ICO Analytics token sale data","type":"research","url":"https://icoanalytics.org/projects/b2-network/"},{"credibility":3,"name":"$35 Million Drained In Six Hours. The Bridges Learned Nothing. — The Wolf Den (Substack)","type":"news_article","url":"https://thewolfden.substack.com/p/35-million-drained-in-six-hours-the"}],"summary":"B² Network (BSquared Network) is a Bitcoin Layer-2 scaling protocol founded in November 2022, utilizing zero-knowledge proof verification and EVM-compatible rollup technology. On July 22–23, 2026, the project suffered a confirmed security exploit in which an attacker gained unauthorized access to the upgrade authority of its B2 token staking contract on BNB Chain, draining 8.59 million B2 tokens valued at approximately $3.86 million. The stolen funds were sold for BNB, bridged to Ethereum, and are being routed through NEAR Intents toward Zcash for laundering, according to blockchain investigator Specter. The incident was one of three coordinated exploits on the same day — alongside the Verus Ethereum Bridge ($7.54M) and AFX Trade ($24.15M) — in what Lookonchain labeled 'Hackers' Day,' with combined losses of $35.55 million.","timeline":[{"date":"2022-11-01","event":"B² Network founded as a Bitcoin Layer-2 scaling protocol utilizing zero-knowledge proof verification commitment rollup technology.","source":"CoinMarketCap / B² Network official documentation","source_url":"https://coinmarketcap.com/cmc-ai/bsquared-network/what-is/"},{"date":"2024-01-25","event":"B² Network raised a seed funding round from investors including Antalpha, IDG Capital, HashKey Capital, KuCoin Ventures, OKX Ventures, Waterdrip Capital, ABCDE Capital, and Animoca Brands.","source":"CypherHunter / ICO Analytics","source_url":"https://icoanalytics.org/projects/b2-network/"},{"date":"2025-04-30","event":"B2 token IDO conducted at $0.0714 via Binance Wallet, raising $300,000. B2 trading commenced on major exchanges.","source":"ICO Analytics / CoinMarketCap","source_url":"https://icoanalytics.org/projects/b2-network/"},{"date":"2025-10-26","event":"B2 token reached its all-time high price of approximately $2.11.","source":"CoinGecko","source_url":"https://www.coingecko.com/en/coins/bsquared-network"},{"date":"2025-01-01","event":"Alleged: The wallet subsequently used in the July 2026 exploit is reported to have been granted privileged upgrade authority access to the B2 staking contract from approximately this period onward.","source":"Metaverse Post (citing blockchain analysis)","source_url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"date":"2026-04-30","event":"B² Network celebrated its first TGE anniversary and released a long-term roadmap called 'B² 2048,' refocusing on AI-driven Bitcoin utility as payment infrastructure for AI agents.","source":"CoinMarketCap","source_url":"https://coinmarketcap.com/cmc-ai/bsquared-network/latest-updates/"},{"date":"2026-07-22","event":"At approximately 21:30 UTC, an attacker exploited unauthorized access to the upgrade authority of B² Network's BNB Chain staking contract, draining 8.59 million B2 tokens valued at approximately $3.86 million.","source":"CoinDesk / Lookonchain / multiple outlets","source_url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"date":"2026-07-22","event":"The 8.59 million stolen B2 tokens were sold for approximately 5,409 WBNB (~$3.01–3.11 million) on BNB Chain, with approximately $850,000 lost to price impact slippage. BNB proceeds were bridged to Ethereum and converted to ETH and USDT.","source":"Lookonchain / Metaverse Post / CryptoAdventure","source_url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"date":"2026-07-22","event":"Stolen funds deposited into NEAR Intents and HOT Protocol cross-chain routing services. Blockchain investigator Specter reported the funds are being routed toward Zcash for privacy obfuscation.","source":"Metaverse Post / CryptocurrencyHelp (citing investigator Specter)","source_url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"date":"2026-07-23","event":"B² Network confirmed the incident via official X post, suspended B2 staking operations, pledged full user compensation, and sent an on-chain message offering the attacker legal immunity in exchange for returning at least 10% of stolen funds.","source":"B² Network official X / Protos / CryptoSlate","source_url":"https://x.com/BSquaredNetwork/status/2080077286238454109"},{"date":"2026-07-23","event":"Lookonchain dubbed the day 'Hackers' Day,' reporting combined losses of $35.55 million across three exploits: B² Network ($3.86M), Verus Ethereum Bridge ($7.54M), and AFX Trade ($24.15M).","source":"KuCoin / CryptoPotato / CoinDesk","source_url":"https://www.kucoin.com/news/flash/three-hacks-today-result-in-35-55m-loss"},{"date":"2026-07-24","event":"No completed restitution or attacker response to the bounty offer documented in public reporting as of this date. B² Network had not published a formal post-mortem or independent security audit.","source":"CryptoSlate","source_url":"https://cryptoslate.com/two-ethereum-bridges-lose-31-7m-within-hours-as-third-protocol-halts-staking/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 53d8b11e-4b3b-4d86-89bf-f5476705a319copy