Research summary
This review reaches an adverse research assessment on the clearest grounds of any Bitcoin-bridge entity in this backlog: no disclosed custody, no working exit, and a recent parent-organization exploit with an insider-access red flag. B² Buzz is a staking and points event on B² Network (BSquared), the Bitcoin Layer 2 that UniRouter, already rejected in this registry, is built on top of. B²'s own bridge documentation names no custody architecture and states plainly that "the withdraw function is not yet available." The bridge is deposit-only, with no disclosed path back to native BTC at all. In July 2026, weeks before this review, B² Network was exploited for about $3.86M when an attacker used privileged upgrade authority over a token staking contract. The wallet that executed the drain had held that authority since 2025, with access revoked only after the theft, a pattern independent analysts read as a credible insider-access concern the team has not refuted.
Observable review triggers
- A withdrawal or redemption function is implemented, documented, and demonstrated to work at proposed size
- Custody architecture and named signing parties are publicly disclosed
- An independent post-mortem of the July 2026 exploit is published, confirming whether the privileged access was insider-originated, with remediation verified
- Twelve consecutive months with no further token-contract or bridge-contract privileged-access incident, counted from the July 2026 exploit
Facts on file
- Verdict
- Rejected
- Type
- Other
- Chains examined
- Ethereum
- Reviewed
- Last confirmed