BNB Chain Project CodexField Faces Rug Pull Claims After Abnormal Fund Transfers

MakeCryippreferred on

CodexField, a project on BNB Greenfield and BNB Smart Chain, is facing rug pull allegations after on-chain analyst Specter identified large fund movements from linked wallets. Specter published the findings on July 9, 2026, reporting that the project had attracted substantial deposits with a minimum $100 entry requirement. The analysis focused on cross-chain transfers involving tens of millions of dollars.

Specter Traces Reported Cross-Chain Transfers

Specter published the original thread on July 9, 2026, at approximately 14:48 UTC. According to his analysis, wallets connected to CodexField bridged $17.3 million USDT from TRON to Ethereum. The funds were then swapped for DAI on Polygon using Bitget Swap.

• $6.5 million reportedly moved onward.
• $10.8 million reportedly remained in transit at the time of the post.
• Two additional TRON wallets reportedly sent more than $3.4 million to exchanges.
• The source wallet linked to the CodexField deposit contract, identified as 0x9E6A…52AA, reportedly received funds bridged from Ethereum to TRON about six months earlier.
• Specter cited 0xBc60…747a as the primary bridge wallet.

Blocksec MetaSuites labelled the deposit contract as “Fake CodexField.” Specter stated that the contract appeared to be operated by the project team.

Cross-chain bridging and multi-wallet routing can serve legitimate operational, liquidity or treasury-management purposes and do not alone prove illicit intent. Similar transaction routes can also complicate investigations when funds connected to security incidents move between networks, as seen following the $2.5 million TesseraDAO incident on BNB Chain. Ownership and the final destination of all funds identified in the CodexField analysis have not been independently established beyond Specter’s tracing.

CodexField’s Online Status and BNB Chain Links

CodexField operates as a protocol on BNB Greenfield and BNB Smart Chain for the on-chain assetization of code and technical content. It participated in the BNB Chain Hackvolution hackathon, winning first prize in the infrastructure track, and was selected for MVB Season 8.

These records establish programme participation, not institutional endorsement, investment or responsibility for the project’s activities. The distinction is relevant across the BNB Chain ecosystem, where public interactions or ecosystem involvement may be incorrectly interpreted as formal support. Binance founder Changpeng Zhao recently made a similar distinction when he said he did not own or know several BNB Chain meme coins associated with his name, despite community discussions linking the tokens to him.

Specter’s follow-up post on July 10, 2026, stated that the project’s X account changed from @CodexField to @CodexField_AI and that multiple deposit subdomains were taken down.

No response from CodexField, BNB Chain, Binance or Zhao had been issued regarding the allegations as of July 10, 2026. No official security firm report or law-enforcement confirmation of a rug pull was located.

CODEX Declines While BNB Shows No Clear Related Move

According to CoinMarketCap:

• CODEX on July 9, 2026 (pre-allegation): trading above recent $15 levels.
• CODEX on July 10, 2026 (post-allegation, approx. 10:00 UTC): $14.04, down 8.57% in 24 hours, 24h low $9.89, high $15.46, 24h volume $705K, market cap ~$102M (self-reported circulating supply 7.26M / 120M total).

BNB on July 10, 2026: trading in the $565–$575 range with daily changes under 2%. Available snapshots do not establish whether the allegation caused the CODEX price movement.

The allegations also emerged shortly after a month of elevated blockchain security activity. A June 2026 crypto security analysis recorded 45 incidents and approximately $76.51 million in disclosed losses, including several cases involving BSC or BNB Chain. However, that broader security environment does not provide evidence that CodexField carried out a rug pull.

No further verified developments, official responses, or completed on-chain forensic reports were available at the time of publication. The extent of fund movements and project control over the identified wallets remain unconfirmed beyond Specter’s analysis.