Skip to main content
AVOID.NET

BingX

avoid.net/bingx→58/100·100% conf.
[AI-DRAFTED · AWAITING FACT-CHECK][src:defillama]

Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 32 → 58. Problems weighed by who is responsible: concerns that are not fraud −9.6, incidents the subject suffered −6.4, problems around the subject, caused by others −0.8; legitimacy credit long-running +10. Version history →

Why this score
Every page starts at65
Concerns that are not fraud-9.6
Incidents it suffered (e.g. hacks)-6.4
Problems around it, caused by others-0.8
Long-running+10
Sum58

Score: 58/100 (kept between 0 and 100)

How scoring works →
anchored·TNoKQx…ogUL
last updated 2026-10-10

Summary

BingX is a Singapore-headquartered centralized cryptocurrency exchange founded in 2018 (originally as Bingbon), operating across 160+ countries with over 10 million reported users. In September 2024, the exchange suffered a confirmed hot wallet breach totaling approximately $52 million across at least seven blockchain networks, with on-chain forensics subsequently linking the attack to North Korea's Lazarus Group. The exchange pledged full user compensation from reserves and resumed withdrawals within days, but independently unverified regulatory claims and initial opacity around the breach raise ongoing due-diligence concerns.

Connected Entities

12 entities · 60 linked investigations
Organizations
□Polygon54□Ethereum□Bitget□Phemex□Arbitrum□BingX□Binance□North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign□Poloniex□Base□ZachXBT□Optimism
Relationships
  • Optimism→mentioned with→Arbitrum(65%)
  • ZachXBT→mentioned with→Ethereum(70%)
  • Optimism→mentioned with→Ethereum(80%)
  • ZachXBT→mentioned with→Binance(60%)
  • Binance→mentioned with→Ethereum(65%)
  • BingX→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • Phemex→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • Poloniex→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • ZachXBT→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • Arbitrum→mentioned with→Binance(65%)
  • + 25 more
Have evidence about BingX?

Timeline(10 events)

2018

Exchange founded under the name Bingbon.

2021

Bingbon rebrands to BingX.

June 2023

BingX publicly announces MSB registrations in the US (FinCEN) and Canada (FINTRAC); claims not independently verified in public registrant databases.

20 September 2024

Hot wallet breach detected at approximately 4:00 AM Singapore time; BingX suspends deposits and withdrawals, initially describing the event as 'temporary wallet maintenance.' Security firms Cyvers and PeckShield flag suspicious outflows of $26–43 million across seven blockchain networks.

20 September 2024

Cyvers attributes behavioral patterns of the attacker to tactics consistent with North Korea's Lazarus Group, though formal attribution is not confirmed at this stage.

21 September 2024

BingX acknowledges the security breach publicly. CPO Vivien Lin pledges full user reimbursement from company reserves. Estimated losses revised upward to approximately $52 million.

21 September 2024

BingX begins working with SlowMist and Chainalysis on forensic investigation. $10 million in stolen assets frozen.

22 September 2024

BingX restores deposits and withdrawals for USDT, USDC, BTC, ETH, TRX, and SOL. Accusations of a cover-up dismissed by CPO Vivien Lin via public AMA.

22 February 2025

Blockchain investigator ZachXBT publishes on-chain analysis demonstrating that an address used in the BingX hack is directly connected to the address cluster behind the Phemex hack and the $1.5 billion Bybit hack, linking all three incidents to Lazarus Group.

23 February 2025

ZachXBT further links Poloniex to the same Lazarus Group cluster, identifying four major exchange hacks connected to a single threat actor.

Provenance & Audit Trail

Decision Log

  • #2rescore+26Recorded on Solana ✓10/10/2026, 6:44:34 PM
    slot 455364262 · hash 5PinQ7GAqBptJ4J9UxawGFWqqi34moZjkw46HfQuG2ed
  • #1publishRecorded on Solana ✓5/20/2026, 4:21:57 AM
    slot 420912723 · hash 9XB9QAf6ES4L7gvrajsVo3warqrnbDnJ5HH8nyBPpxad

This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 18 of 19 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:28 AM

last updated: 10/10/2026, 6:44:34 PM

8 views

avoid.net — verified advice for a post-truth world