The BNB Chain blockchain team has identified a critical vulnerability in cryptographic key management processes related to the actions of a former employee. During the creation of the official training video about the launch of memcoins, the developers used the real wallet address, which was originally intended solely for demonstration purposes. After his dismissal, the specialist retained unauthorized access to the SEED phrase of this address, since private keys in decentralized networks are not subject to automatic revocation, unlike corporate access in traditional fintech companies. Taking advantage of this situation, the ex-employee generated a new private key and initiated the release of the ASTEROID token using a compromised address.

Investors, having discovered the connection of the new asset with the address appearing in the official materials of the BNB Chain, mistakenly interpreted the project as a legitimate initiative of the platform itself. As a result, within the first four hours after launch, the market capitalization of the ASTEROID token reached $10.0 million, and the total trading volume exceeded $20.5 million. The situation changed dramatically after the publication of the official statement of the BNB Chain developers, in which the company categorically denied its involvement in the project, pointing out the lack of approval or control over this asset. Against the background of this denial, the token's quotes fell by 52.59%, and in just 20 minutes its capitalization dropped to $3.0 million.

This incident highlights the fundamental differences in access management between the traditional financial sector and the blockchain industry. In classical corporate structures, the dismissal of an employee is accompanied by an instant revocation of rights through identification and access management (IAM) systems, whereas in cryptography, keeping a copy of the seed phrase guarantees indefinite control over assets. This feature poses a constant security threat, as the transparency of the blockchain allows attackers to track the history of old but still active wallets. Moreover, modern cyberattack methods make it possible to steal seed phrases even from screenshots and image galleries on mobile devices, which further increases the risks of compromising corporate crypto assets.

***

The material has been prepared solely for informational purposes and does not constitute financial advice or recommendation.