Binance Recovers $344K From Scam DeFi Project Launched on Its Platform

Having raised the funds at launch on Binance Smart Chain in October, the operator fled with users' cryptocurrency "within an hour," Binance said.

AccessTimeIconNov 4, 2020 at 12:22 p.m. UTC
Updated Sep 14, 2021 at 10:27 a.m. UTC

Cryptocurrency exchange Binance says it has successfully followed the money trail left by the operator of a scam decentralized finance (DeFi) project and recovered nearly all the stolen funds.

  • In an announcement provided to CoinDesk on Thursday, Binance said it has gained custody of an estimated 99.9% of $345,000 worth of cryptocurrency stolen by purported automated market maker Wine Swap in October.
  • Having raised the funds at launch on Binance Smart Chain in October, the operator fled with users' cryptocurrency "within an hour," Binance said.
  • The so-called exit scam was executed by moving the 19 different cryptocurrencies held in Wine Swap's address "0xa1eaB5F255DD77fED0D8ea81748422ca7ab0eDc4" to a personal address belonging to the bad actor: "0x4BA023aA9196a354C008aD595F67e268420b7005".
  • The various coins were moved via cross-chain transfers from Binance Smart Chain to Binance Chain and then to Ethereum, according to Binance.
  • A small portion of the funds was moved to two exchanges, as well as Binance Bridge, a service that provides access to inter-blockchain liquidity for decentralized applications on Binance Chain and Binance Smart Chain.
  • The Binance said its security team closely followed the transactions and managed to identify the malicious actor. By then, the scammer had nearly converted all of the funds into stablecoins, as well as Binance coin (BNB), ether (ETH) and Chainlink's LINK token.
  • After being contacted by Binance, the scammer returned the funds to the exchange.
  • "Analysis of the transfers to and from Wine Swap allowed us to identify which addresses fell victim to the scam and calculate exactly how much was owed to them," the exchange said.
  • Binance now plans to refund the victims' addresses "within the next several days."
  • Binance had seen some criticism over the fact that the scam project was launched on its platform.
  • CoinDesk asked the exchange if it had reported the scammer to law enforcement, but a reply hadn't been received by press time.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

Learn more about Consensus 2024, CoinDesk’s longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.