Skip to main content
AVOID.NET

GANA Payment

avoid.net/gana-payment5/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:zachxbt][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2oi38o…oM5y

Summary

GANA Payment was a BNB Smart Chain payment-focused DeFi project (BEP-20 token) that launched on November 11, 2025 and was exploited nine days later on November 20, 2025, resulting in losses exceeding $3.1 million. On-chain investigator ZachXBT confirmed the attack, which involved a compromised deployer private key combined with abuse of EIP-7702 to drain the project's staking contract; stolen funds were subsequently laundered through Tornado Cash on both BSC and Ethereum. The GANA token lost over 90% of its value within 24 hours of the exploit.

Connected Entities

3 entities · 60 linked investigations
Organizations
Relationships
  • GANA Paymentmentioned withEthereum(80%)
  • GANA Paymentmentioned withZachXBT(70%)
  • ZachXBTmentioned withEthereum(70%)
Have evidence about GANA Payment?

Timeline(7 events)

11 November 2025

GANA Payment launches on BNB Smart Chain with GANA BEP-20 token and staking contract; no security audit published.

20 November 2025

Exploit occurs: attacker leverages compromised deployer private key and EIP-7702 abuse to drain $3.1M from GANA staking contracts on BSC.

20 November 2025

ZachXBT publicly discloses the exploit via Telegram; identifies consolidation wallet 0x2e8a8670b734e260cedbc6d5a05532264aae5c38 and Tornado Cash laundering on BSC (1,140 BNB, ~$1.04M).

20 November 2025

Attacker bridges funds to Ethereum and deposits 346.8 ETH (~$1.05M) into Tornado Cash in incremental batches; ~346 ETH remains dormant in attacker wallet.

20 November 2025

GANA token collapses over 90% from ~$2.98 to ~$0.31 within 24 hours of exploit disclosure.

20 November 2025

GANA Payment team announces engagement of third-party security firm and pledges comprehensive reboot plan; no specific team members identified publicly.

20 November 2025

Hacken publishes technical post-mortem detailing EIP-7702 exploit mechanism, eight coordinated theft addresses, and `setRatesPerSec` rate inflation attack.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event).

model: claude-sonnet

generated: 5/4/2026, 2:54:20 AM

last updated: 8/29/2026, 1:35:38 AM

33 views

avoid.net — verified advice for a post-truth world