Data leak [loss] $4M+

Tweet thread by Meter_IO

2022-02-05 [vendor] Meter Passport bridge
Primary Source ↗
Financial Loss $4.3M (4,300,000 USD)

Incident Details

A bug in the Meter Passport smart contract allowed an attacker to pull 1400 ETH ($4.2 million) and 2 wrapped Bitcoin ($83,000) from the Meter Passport blockchain bridge. This was the second hack of a blockchain bridge in three days, following the enormous Wormhole Network exploit. Meter urged its users not to trade any meterBNB, which are currently unbacked, and wrote that they were “working on compensating funds to all affected users.”

Total loss estimated at $4,300,000.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
Meter Passport bridge

Timeline

  1. 2022-02-05 Breach occurred
  2. 2022-02-05 Publicly disclosed