CodexField Shows Signs of $85M Rug Pull on BNB Greenfield

Published by James Harris on July 10, 2026July 10, 2026

Blockchain analyst Specter published findings on July 9 alleging that CodexField, a decentralized code management platform built on BNB Greenfield, may be executing a rug pull, with more than $85 million in user funds tracked across multiple wallets and blockchains. The investigation centers on a deposit contract (0x9E6A75b546B65E7B9D34E2c9aB8Fe224B9aA52AA) that Specter says is shared across all of CodexField’s official domains, and which blockchain intelligence platform MetaSleuth has labeled “Fake CodexField.” Specter verified the contract was used for actual deposits by cross-referencing the project’s official channels and tutorials.

The fund movements Specter flagged are specific: $17.3 million in USDT was bridged from TRON to Ethereum, then swapped for DAI on Polygon via Bitget Swap. Of that amount, $10.8 million has not yet reached its stated destination. Specter also noted what appears to be treasury funds routing through intermediary wallets before landing at centralized exchange addresses, a pattern that investigators typically treat as a precursor to cashing out.

Neither CodexField nor BNB Chain has confirmed or responded to the findings. The $85 million figure lacks a transaction-level breakdown in Specter’s published post, and wallet attribution for that estimate is incomplete.

Why the BNB Chain Endorsement Makes This Harder to Dismiss

CodexField is not an anonymous token launch. In September 2023, BNB Chain promoted the project after it won first place in the Infrastructure category of its Hackvolution hackathon. The platform was positioned as a legitimate alternative to GitHub, letting developers store repositories on-chain and monetize software through a blockchain marketplace. That institutional endorsement is what separates this from the typical low-profile exit scam and makes BNB Chain’s current silence worth watching.

BNB Chain’s exposure to this category of fraud is not incidental. According to blockchain security firm Immunefi, rug pulls accounted for 44% of total losses on BNB Chain in 2023, compared to just 1.7% of similar losses on Ethereum over the same period. Total losses on BNB Chain from 2020 onward have reached approximately $1.64 billion, with $368 million attributed to fraud across 228 cases. The chain has repeatedly struggled to square its developer ecosystem ambitions with the persistent concentration of exit scams among its projects.

A Pattern the Chain Has Seen Before

The mechanics here echo two prior BNB Chain incidents. In 2021, TRM Labs connected the SQUID token scam to the theft of over 35,000 BNB, worth approximately $19.3 million at the time, through a mechanism that prevented investors from withdrawing funds. In October 2025, OracleBNB deleted its website and social media accounts before its token collapsed more than 95%. Both cases share the same structural signature as what Specter describes: cross-chain asset movement, intermediary wallet hops, and centralized exchange destinations.

The pattern matters because it describes a playbook, not a coincidence. Projects that route funds across three or more chains before reaching an exchange are, in most documented cases, either testing withdrawal infrastructure or preparing to exit. That does not establish fraud here, and Specter’s post does not claim to.

What Would Shift This From Allegation to Finding

The credibility of Specter’s investigation now depends on two things: a transaction-level breakdown supporting the $85 million deposit figure, and clearer wallet attribution tying the identified addresses to CodexField’s operators rather than to unrelated counterparties.

Equally consequential is whether BNB Chain responds. A chain that publicly promoted CodexField through its own hackathon carries some reputational exposure here, and its silence is itself a data point. If the cross-chain fund movements can be explained as normal treasury operations, CodexField or its backers have every incentive to say so now. The longer that explanation doesn’t come, the more the on-chain pattern speaks for itself.