From October 28 to 30, the BabyDoge bridge between BNB Chain and TON issued 242 trillion BabyDoge to a single recipient based on claims that had no corresponding deposits: 149 trillion from the TON vault and 93 trillion from the BNB Chain vault. The tokens were immediately sold on STON.fi and in BNB Chain liquidity pools, generating 35,942 Gram and 42.7 BNB, approximately $75,000 at the exchange rates of those days. This affects BabyDoge holders who transfer the coin between networks: the vaults are the reserves from which the bridge issues coins to those arriving from the other side. The amount is constrained only by a daily withdrawal limit of 50 trillion, and withdrawals continued into the night of October 30.
What Happened
The bridge is structured as a pair of vaults: tokens are locked in one network, and an equivalent amount is issued from the reserve in the other. To receive tokens, a withdrawal claim is required — a message containing the amount, recipient, claim number, and a signature from the bridge's signing key, which confirms that a deposit was made on the other side.
The exploit was reported on the night of October 29, during the first day of withdrawals. Below are all the recipient's claims across both networks, Moscow time.
| Time | Network | Amount, trillion BabyDoge | Claim Number |
|---|---|---|---|
| 28.10, 19:55 | BNB Chain | 49.999 | 777101 |
| 28.10, 21:41 | TON | 49.999 | 888001 |
| 29.10, 03:57 | TON | 49 | 888002 |
| 29.10, 03:58 | BNB Chain | 8.696 | 888002 |
| 29.10, 21:32 | TON | 1 | 888003 |
| 30.10, 03:01 | TON | 49 | 888004 |
| 30.10, 03:01 | BNB Chain | 34 | 888003 |
The amounts hit the limit: 49 trillion followed by 1 trillion in TON on October 29 total exactly 50 trillion for the bridge's day (UTC). The bridge's day starts at 03:00 Moscow time, and the withdrawals on October 29 and 30 occurred in the first hour of the new day.
The first claim in TON at 21:32 on October 28 was rejected by the vault contract with error code 45912, and the gas was returned to the sender. Nine minutes later, the next claim for 49.999 trillion went through.
Why This Was Not a Normal Withdrawal
In the year leading up to October 28, 188 claims were processed from the TON vault. A typical claim was around 1 trillion BabyDoge, with the largest being 5.2 trillion. The busiest day, May 6, saw 17.5 trillion across several claims. Between September 29 and October 28, there was only one withdrawal — on October 9, for 0.78 trillion.
Each of the recipient's claims was 49–50 trillion, ten times larger than the biggest claim in the past year. The claims themselves also differed.
Claim Numbers. Normal user claims are numbered sequentially: the last ones before October 28 were 366, 368, 373. This recipient's claims were 888001, 888002, 888003, 888004, and one 777101. The claim number is used by the vault to prevent replays: for each claim, it deploys a separate small contract, and a second claim with the same number encounters an already existing one.
Deposit Sender. The claim specifies who deposited the tokens on the other side. For the first claim in TON, the sender was listed as the recipient itself in BNB Chain. For all subsequent claims in both networks, the sender was address 0x05eA4AF4…9d1122. This address on BNB Chain has zero transactions and a zero balance, and no BabyDoge deposits were made to the bridge contract from the recipient's address during these days. There are no deposits corresponding to the claims.
Signature. Despite this, the signatures passed verification in both networks: the contracts accepted the claims and issued tokens. On-chain, it appears as though the bridge's signing key or the service that confirms deposits signed claims without any underlying deposits. Which of the two scenarios occurred cannot be distinguished on-chain.
What a claim looks like internally
In TON, a claim is a message with operation code 0x02771e27 that the recipient sends to the vault itself, attaching 0.6 Gram for gas. The body contains: the claim number, amount, recipient address, source network as the string evm.56 (BNB Chain), deposit sender address as a string, and the signature in a separate cell. The vault deploys a contract for the claim number, which responds that the number is available, and only then does the vault transfer the tokens from its wallet. In BNB Chain, it's the same — a call to 0x984bd4b2 on the bridge contract with the amount, recipient, claim number, string ton.0, and a single signature. Two claims in BNB Chain were sent not by the recipient, but by an address with four transactions in its entire history — two of which are these claims.
Where the Tokens Went in TON
The recipient's wallet was created on April 3, 2025, and remained inactive for a year and a half. On October 28 at 20:27, an hour before the first claim in TON, 18 Gram for gas arrived in it.
Each 49–50 trillion was sold on STON.fi within an hour of withdrawal, in portions ranging from 0.25 to 39 trillion. Over three nights, these sales yielded 35,942 Gram. The Gram then went two ways.
- 25,660 Gram were sent in five transfers to a wallet, each with a four-digit memo: 1081, 1202, 1073, 1086, 1103. The same numbers appear on dozens of transfers from other senders — this is how exchange services distinguish orders. The wallet is topped up from Binance and Bitget hot wallets and sends Gram to a contract — the same one from which the 18 Gram for gas originated.
- 10,290 Gram were sent on October 30 to a new wallet, and from there at 03:29 — 10,000 Gram to a KuCoin deposit address with a memo, which the exchange uses to credit the transfer to a specific account. Another 100 Gram went to a wallet deployed at the same minute.
Where the Tokens Went in BNB Chain
The recipient sold all 92.7 trillion in BNB Chain liquidity pools via a DEX aggregator: 23.09 BNB on October 28, 4.03 BNB on October 29, and 15.63 BNB on October 30, each time 2–20 minutes after withdrawal. Of the 42.7 BNB, 0.22 BNB remained at the address, the rest was transferred further.
What Remains in the Bridge
As of October 30, the bridge vault in TON holds 132.8 trillion BabyDoge, and in BNB Chain — 157.5 trillion, totaling approximately $94,000. With a daily limit of 50 trillion, the TON vault has enough for three more such nights.
The bridge is still accepting deposits. Over the same three days, two addresses sent 99 trillion BabyDoge through the TON vault towards BNB Chain — more than in any month this year — and 77 trillion of those occurred in the first five minutes of the bridge's new day.
