Skip to main content
Sign in

GANA Payment

avoid.net/gana-payment→5/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:zachxbt][src:defillama]
anchored·2oi38o…oM5y

Summary

GANA Payment was a BNB Smart Chain payment-focused DeFi project (BEP-20 token) that launched on November 11, 2025 and was exploited nine days later on November 20, 2025, resulting in losses exceeding $3.1 million. On-chain investigator ZachXBT confirmed the attack, which involved a compromised deployer private key combined with abuse of EIP-7702 to drain the project's staking contract; stolen funds were subsequently laundered through Tornado Cash on both BSC and Ethereum. The GANA token lost over 90% of its value within 24 hours of the exploit.

Connected Entities

1 entities
Organizations
□GANA Payment
Relationships
    Have evidence about GANA Payment?

    Timeline(7 events)

    2025-11-11

    GANA Payment launches on BNB Smart Chain with GANA BEP-20 token and staking contract; no security audit published.

    2025-11-20

    Exploit occurs: attacker leverages compromised deployer private key and EIP-7702 abuse to drain $3.1M from GANA staking contracts on BSC.

    2025-11-20

    ZachXBT publicly discloses the exploit via Telegram; identifies consolidation wallet 0x2e8a8670b734e260cedbc6d5a05532264aae5c38 and Tornado Cash laundering on BSC (1,140 BNB, ~$1.04M).

    2025-11-20

    Attacker bridges funds to Ethereum and deposits 346.8 ETH (~$1.05M) into Tornado Cash in incremental batches; ~346 ETH remains dormant in attacker wallet.

    2025-11-20

    GANA token collapses over 90% from ~$2.98 to ~$0.31 within 24 hours of exploit disclosure.

    2025-11-20

    GANA Payment team announces engagement of third-party security firm and pledges comprehensive reboot plan; no specific team members identified publicly.

    2025-11-20

    Hacken publishes technical post-mortem detailing EIP-7702 exploit mechanism, eight coordinated theft addresses, and `setRatesPerSec` rate inflation attack.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chainsrc:zachxbtsrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.

    full audit log →version history →

    model: claude-sonnet

    generated: 5/4/2026, 2:54:20 AM

    last updated: 5/26/2026, 4:11:12 AM

    avoid.net — verified advice for a post-truth world