Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

LiveMediumNo fix neededBreaches & attacks

Diamante: attacker uses stolen access keys to mint 161M unauthorized DIAM; exchanges suspend the token

Diamante DIAM token (BNB Smart Chain)

On Oct 27 2026 an attacker used stolen Diamante company access keys to take control of the DIAM token contract on BNB Smart Chain and create 161M unauthorized DIAM. Diamante says it alerted exchanges within 13 minutes and Bybit, MEXC, KuCoin, Gate and Blofin suspended DIAM within hours; about 93% of the unauthorized tokens are frozen or traced to restricted exchange accounts. The contract is back under Diamante's control in an MPC wallet, the unauthorized tokens are to be removed, and deposits, withdrawals and trading reopen after that. No loss figure has been published.

Why this severity: 161M unauthorized DIAM minted; exchange deposits, withdrawals and trading suspended; no loss figure published

Started
Oct 27, 2026

Follow this incident

Discuss on X ↗

Affected

  • DIAM token contract on BNB Smart Chain

Fixed in

No fixed release yet

Timeline3

  1. MEXC suspends DIAM deposits and withdrawals at the project's request.

  2. Founder says stolen company access keys were used to mint 161M DIAM; ~93% frozen or traced, contract moved to an MPC wallet, criminal complaint filed with UAE authorities.

  3. Diamante posts an official security incident announcement: unauthorized activity by a malicious actor; affected withdrawals and transfers suspended with exchange partners.

Advisories3

News & write-ups1
Posts1
C J $DIAM
@chiragjetani

2/ -On 27 Oct, an attacker used stolen company access keys to take control of the DIAM contract and created 161M unauthorized DIAM. -This was a theft of access keys, not a flaw in Diamante’s technology.

Notes & caveats

Diamante has not published a loss figure, the attacker's identity, or how the keys were stolen. Holders are told to avoid trading DIAM on DEXs until next steps are confirmed.

Get an email when a new major security incident drops. No spam, unsubscribe any time.