
8 New Blockchains in Pathfinder
Iknaio Pathfinder now covers fourteen blockchains: the six core blockchains Bitcoin, Bitcoin Cash, Litecoin, Zcash, Ethereum and Tron, and eight new ones, including BNB Smart Chain, Arbitrum and Base.
In this post, we present the eight new blockchains, what they add to investigations and what Pathfinder can do on them. We then follow one real case across a bridge: stolen funds from the GANA Payment exploit of November 2025, on their way from BNB Smart Chain to Ethereum.
The new blockchains
The eight new blockchains are:
- BNB Smart Chain
- Arbitrum
- Base
- Optimism
- Polygon
- Avalanche C-Chain
- Gnosis
- Robinhood Chain
All eight are EVM blockchains: they run smart contracts on the Ethereum Virtual Machine (EVM) and use the Ethereum address format, so one key gives the same address on each of them. This brings two improvements for investigations:
- More hits for cross-chain key reuse. Pathfinder lists the addresses of one key on other blockchains as related addresses, as described in our post on cross-chain key reuse [1] and in the underlying research paper [2]. The new blockchains add more places where a key can show up. Figure 1 shows a key of the exchange Gate that is in use on Bitcoin, Tron, Ethereum and seven of the eight new blockchains.
- More bridge transfers resolved. Pathfinder links a bridge transfer to its payout when both blockchains are in Pathfinder. Many bridges connect Ethereum with the new blockchains, so more bridge transfers now lead to their payout, and the trace continues in the same graph.
Capabilities
Pathfinder supports the new blockchains in Lite mode and marks them with a Lite badge. For an address on a new blockchain, Pathfinder shows:
- its transactions in the native coin and in the tokens Iknaio supports, with filters for direction, token and time range
- its attribution tags (labels that name who controls an address)
- its related addresses: the addresses of the same key on other blockchains
- its bridge transfers, each linked to its payout on the destination blockchain
Relationship mode (the view of the counterparties of an address) is not available on the new blockchains.
The GANA Payment exploit
On 20 November 2025, an attacker took more than 3.1 million USD from GANA Payment, a payment protocol on BNB Smart Chain, as reported by The Block
[3] based on an analysis by ZachXBT
[4]. The perpetrator address 0x2e8a8670b734e260cedbc6d5a05532264aae5c38
split the stolen USDT (a US dollar stablecoin) between two wallets, A and B.
Wallet A’s part stayed on BNB Smart Chain. It was swapped for BNB and, less than an hour after the split, deposited into Tornado Cash (a mixing service). Wallet B’s part took the bridge to Ethereum. Scrolling through the graph below follows both routes step by step.

- The trail starts at the perpetrator address on BNB Smart Chain.
- The perpetrator split the stolen USDT between wallet A and wallet B.
- Wallet A's part was swapped for BNB on BNB Smart Chain.
- Less than an hour after the split, the BNB went into Tornado Cash.
- Wallet B sent its part through Stargate to Ethereum. Pathfinder links each transfer to its payout there, at the same address.
- On Ethereum, wallet B swapped the USDT for ETH and, about four hours later, deposited it into Tornado Cash.
In the GANA case, the trail does not stop where the stolen funds leave BNB Smart Chain. With fourteen blockchains in Pathfinder, many more cases that cross a bridge can now be followed in one graph, from the first address to the last.
References
[1] Iknaio (2026, February 18). Cross-Chain Key Reuse: How Public Keys Link Addresses Across Chains . Iknaio Insights.
[2] Stütz, R., Stifter, N., Dragaschnig, M., Haslhofer, B., & Judmayer, A. (2026). Reuse of Public Keys Across UTXO and Account-Based Cryptocurrencies . Financial Cryptography and Data Security (FC 2026). arXiv:2601.19500.
[3] Avan-Nomayo, N. (2025, November 20). GANA Payment exploited for over $3.1 million on BNB Smart Chain: ZachXBT . The Block.
[4] ZachXBT (2025, November 20). Analysis of the GANA Payment exploit . ZachXBT Investigations, Telegram.