Hacker attacks Griffin AI: GAIN token price drops 80%
Investors accuse developers of a possible exit scam
25.09.2025 - 10:30
529
3 min
0
Key points:
- On September 25, a serious vulnerability was discovered in the Griffin AI project.
- The hacker released 5 billion tokens and withdrew some of them to PancakeSwap.
- The community suspects the project of an exit scam.
The price of Griffin AI’s native token, GAIN, plummeted more than 80% on September 25, 2025, after an attacker exploited a vulnerability in its smart contract. The hacker issued an additional 5 billion GAIN tokens, increasing the total supply from the initial billion, and immediately transferred 147,5 million tokens to PancakeSwap, earning about 2955 BNB (worth about $3 million).
This attack occurred just as GAIN debuted on the market, appearing on major exchanges including Binance Alpha, KuCoin, HTX, MEXC, and Gate.io. The attacker converted the funds into 720 ETH and ran them through Tornado Cash to cover their tracks. Blockchain analysts, including GoPlus Security, linked the exploit to an unauthorized configuration of LayerZero peers — similar to the attack on the Yala project.
Measures taken after the attack
Griffin AI requested that exchanges suspend trading, deposits, and withdrawals of GAIN to prevent further transactions by the attacker. The team also removed authorized liquidity pools on the BNB Chain and is coordinating with security partners to minimize the impact of the hack. Despite the crisis, daily trading volume rose 126% to $96 million, mainly on DEXs.
Community reaction
The incident sparked lively discussion in the cryptocurrency community. Users noticed that the GAIN token was added to Binance Alpha just one day before the attack, followed by an additional issuance and a massive sell-off of the asset.
Against this backdrop, suspicions of an exit scam intensified, as the new tokens were issued from an address associated with the developers.
Useful material?
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026
Incidents
According to Blockaid, the attack may have been carried out by the same hacker behind the 1inch Fusion V1 exploit.
May 7, 2026
Incidents
The attacker gained administrative access and altered contracts to drain user funds
Apr 30, 2026


Telegram
Twitter