Cryptocurrency [loss] $180M+

Tweet by wormholecrypto

2022-02-02 [vendor] Wormhole bridge [chain] solana
Primary Source ↗
Financial Loss $180.0M (180,000,000 USD)
Recovered $140.0M
Blockchain(s) Solana

Incident Details

The Wormhole Network is a blockchain bridge between Solana and various other blockchains, allowing assets to be traded across the different and not otherwise interoperable chains. After an attacker was able to spoof a guardian account, Wormhole was exploited on February 2 for 120,000 wETH, or about $326 million. The network was taken down for maintenance, and Wormhole promised that “ETH will be added over the next hours to ensure wETH is backed 1:1”. The parent company of Wormhole, Jump Trading, replaced the funds that had been drained; meanwhile, Wormhole offered a $10 million bounty to try to tempt the attacker into returning the funds. The hack was the fourth-largest cryptocurrency theft of all time, trailing behind the $480 million Mt. Gox theft in 2014, the $547 million Coincheck theft in 2018, and the $611 million Poly Network theft (that was later returned) in 2021.

Total loss estimated at $180,000,000.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
Wormhole bridge

Timeline

  1. 2022-02-02 Breach occurred
  2. 2022-02-02 Publicly disclosed