Bancor halted token conversions after a wallet breach exposed $23.5 million

Bancor halted its token-conversion service on July 9, 2018 after disclosing that a wallet with authority to upgrade some of its smart contracts had been compromised. In a follow-up statement issued the same date, the company put the attempted transfers at roughly $23.5 million: 24,984 ether, valued by Bancor at about $12.5 million; 229,356,645 NPXS tokens, valued at about $1 million; and BNT valued at about $10 million.

The headline total needs qualification. Bancor said it froze the transferred BNT through an emergency feature in its protocol. The ether and NPXS could not be frozen, leaving approximately $13.5 million in tokens outside that intervention. Those dollar figures were Bancor’s contemporaneous estimates, not independently audited recovery values or later sale proceeds.

What the company disclosed

Bancor’s first public notice said the service had moved into maintenance while the team investigated and asserted that no user wallets had been compromised. The later update located the breach at approximately 00:00 UTC on July 9 and identified the compromised object as a wallet used to upgrade smart contracts.

That distinction mattered. The incident was not described as an attacker obtaining individual customers’ private keys. It involved operational authority held by the project around contracts and reserve assets used by its conversion network. CoinDesk reported on July 9 that a Bancor spokesperson confirmed the incident and the freeze, and said the team had identified the cause and removed the vulnerability. No detailed forensic report was available in the evidence reviewed for the date, so those points remained company claims rather than independent findings.

Bancor also said it was working with cryptocurrency exchanges to trace the unfrozen assets and make liquidation more difficult. The July 9 record did not establish whether that coordination recovered any ether or NPXS.

A decentralization stress test

Bancor was designed to let users convert tokens through smart contracts and reserve balances rather than rely only on a conventional order book. The breach therefore exposed a governance and security issue larger than the immediate loss: a system can execute trades on-chain while still depending on privileged credentials capable of changing contracts.

The BNT freeze showed both sides of that design. It apparently prevented about $10 million of the project’s own token from remaining transferable, limiting the immediate damage described by Bancor. At the same time, it demonstrated that a central emergency power existed over BNT. The same tool did not apply to ether or NPXS, whose rules were outside Bancor’s unilateral control.

This does not prove that every component of the network was centralized, nor does it establish that smart-contract conversion itself caused the compromise. It does show that operational keys and upgrade permissions were part of the system’s real security boundary on July 9, 2018.

Market signal and limits

CoinDesk reported, using CoinMarketCap, that BNT traded near $2.73 and was down roughly 14% over the preceding 24 hours at the article’s July 9 snapshot. That was a cross-venue aggregator reading for a continuously traded token, not an official close. The surviving report does not preserve the precise constituent venues, liquidity depth, or calculation methodology, so the figure is useful as a contemporaneous reaction indicator rather than a definitive valuation.

The most defensible event-day conclusion was narrower: Bancor had stopped service, disclosed a compromise involving privileged contract-upgrade authority, frozen its own token, and reported about $13.5 million of ether and NPXS beyond that freeze. The attacker’s identity, complete technical path, recovery prospects, and final economic loss remained unresolved on July 9.