Skip to main content
AVOID.NET
Sign in

BingX

avoid.net/bingx→32/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·TNoKQx…ogUL

Summary

BingX is a Singapore-headquartered centralized cryptocurrency exchange founded in 2018 (originally as Bingbon), operating across 160+ countries with over 10 million reported users. In September 2024, the exchange suffered a confirmed hot wallet breach totaling approximately $52 million across at least seven blockchain networks, with on-chain forensics subsequently linking the attack to North Korea's Lazarus Group. The exchange pledged full user compensation from reserves and resumed withdrawals within days, but independently unverified regulatory claims and initial opacity around the breach raise ongoing due-diligence concerns.

Connected Entities

12 entities · 60 linked investigations
Organizations
□Polygon54□Ethereum□Bitget□Phemex□Arbitrum□BingX□Binance□North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign□Poloniex□Base□ZachXBT□Optimism
Relationships
  • Optimism→mentioned with→Arbitrum(65%)
  • ZachXBT→mentioned with→Ethereum(70%)
  • Optimism→mentioned with→Ethereum(80%)
  • ZachXBT→mentioned with→Binance(60%)
  • Binance→mentioned with→Ethereum(65%)
  • BingX→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • Phemex→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • Poloniex→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • ZachXBT→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • Arbitrum→mentioned with→Binance(65%)
  • + 25 more
Also appears in
Polygon·54StableMagnet·2Shibarium·28JUDAO·18Shibarium Bridge·32Andean Medjedovic·2Ionic Money·14Allo Protocol·57AnubisDAO·2SushiSwap RouteProcessor Exploit·54+ 50 more

Connected Through

11 shared actors · 524 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about BingX?

Timeline(10 events)

2018

Exchange founded under the name Bingbon.

2021

Bingbon rebrands to BingX.

June 2023

BingX publicly announces MSB registrations in the US (FinCEN) and Canada (FINTRAC); claims not independently verified in public registrant databases.

20 September 2024

Hot wallet breach detected at approximately 4:00 AM Singapore time; BingX suspends deposits and withdrawals, initially describing the event as 'temporary wallet maintenance.' Security firms Cyvers and PeckShield flag suspicious outflows of $26–43 million across seven blockchain networks.

20 September 2024

Cyvers attributes behavioral patterns of the attacker to tactics consistent with North Korea's Lazarus Group, though formal attribution is not confirmed at this stage.

21 September 2024

BingX acknowledges the security breach publicly. CPO Vivien Lin pledges full user reimbursement from company reserves. Estimated losses revised upward to approximately $52 million.

21 September 2024

BingX begins working with SlowMist and Chainalysis on forensic investigation. $10 million in stolen assets frozen.

22 September 2024

BingX restores deposits and withdrawals for USDT, USDC, BTC, ETH, TRX, and SOL. Accusations of a cover-up dismissed by CPO Vivien Lin via public AMA.

22 February 2025

Blockchain investigator ZachXBT publishes on-chain analysis demonstrating that an address used in the BingX hack is directly connected to the address cluster behind the Phemex hack and the $1.5 billion Bybit hack, linking all three incidents to Lazarus Group.

23 February 2025

ZachXBT further links Poloniex to the same Lazarus Group cluster, identifying four major exchange hacks connected to a single threat actor.

Provenance & Audit Trail
Anchored on SolanaVerify on-chain17 Wayback Archivessrc:defillama

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 17 of 19 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:28 AM

last updated: 9/15/2026, 5:57:04 PM

6 views

avoid.net — verified advice for a post-truth world