In Second Largest DeFi Hack Ever, Blockchain Bridge Loses $320M Ether

The network has over $1 billion in total value locked and supports six blockchains: Terra, Solana, Ethereum, Binance Smart Chain, Avalanche and Polygon

article-image

Blockworks exclusive art by Axel Rangel

share

key takeaways

  • “As far as we can tell now, only wETH has been affected, no other tokens,” a Wormhole admin wrote on Telegram
  • The protocol offered the hacker a bounty of $10 million for details on the exploit and return of the stolen wrapped ether

Wormhole, one of the largest bridges between Solana and other blockchains, has been hacked for about $320 million, or 120,000 ether — making it the second largest DeFi hack to date. 

The interoperability protocol confirmed the exploit in a tweet Wednesday evening.

“ETH will be added over the next hours to ensure wETH is backed 1:1,” the protocol wrote. “More details to come shortly. We are working to get the network back up quickly.”

Wormhole said earlier that the network was down for maintenance. Its website stated “Portal is Temporarily Unavailable” at the time of publication.

The exploit comes after hackers made off with $80 million from decentralized finance protocol Qubit Finance last week. 

Wormhole is a protocol that allows users to bridge assets across blockchains. It has over $1 billion in total value locked and supports six blockchains: Terra, Solana, Ethereum, Binance Smart Chain, Avalanche and Polygon. 

When a user transfers assets from one blockchain to another, the bridge steps in to lock the transaction and mint a wrapped version, such as wrapped ether (wETh), to its final chain.

“As far as we can tell now, only wETH has been affected, no other tokens,” a Wormhole admin, who goes by the username d231d, wrote in its Telegram group. The admin added that the portal bridge is down and asked members not to initiate further transactions.

Some users reported stuck transactions, but the admin said that “as soon as the network is back up, you will be able to redeem the tokens you sent into the bridge.”

The hacker transferred the stolen tokens from Wormhole to their wallet.

While it’s not known how the hacker exploited the network, it took place over three different transactions around 2:00 pm EST on Wednesday, according to Etherscan data

Wormhole sent an on-chain message to the hacker about an hour after the exploit, offering a reward for the return of the tokens. 

“We noticed you were able to exploit the Solana VAA verification and mint tokens,” the message said. “We’d like to offer you a whitehat agreement, and present you a bug bounty of $10 million for exploit details, and returning the wETH you’ve minted.”

It’s not clear whether the exploiter responded to Wormhole. The protocol was not immediately available for comment.


Don’t miss the next big story – join our free daily newsletter.

Tags

Upcoming Events

HYATT REGENCY SALT LAKE CITY

TUES, OCT. 8, 2024

Guided by the expertise of Blockworks Research Analysts team, this one day event will feature senior leaders, entrepreneurs, and developers from across the crypto industry. Attendees will have the opportunity to participate in an immersive experience to explore the latest trends, […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

hivemapper.jpeg

Research

We believe crypto market participants overlook Hivemapper’s fundamental potential due to a poor understanding of both the niche map data market and Hivemapper’s positioning relative to incumbents. Hivemapper’s token model catalyzes both a cost and product advantage via unmatched map freshness and near real-time accuracy, which is its wedge into a market characterized by stale data and high data collection costs. Its current and potential future product suite may represent one of the strongest possibilities for PMF in crypto today.

article-image

The Fidelity Ethereum Fund, like other proposed ETH ETFs, seeks to stake a portion of its assets, according to the firm’s Wednesday registration statement

article-image

The DAO first voted on enabling SAFE transfers over a year ago

article-image

The final Bitcoin halving, where the mining reward becomes smaller than one satoshi, is expected to occur in 2140

article-image

The Department of Justice and Commodity Futures Trading Commission announced back-to-back lawsuits against KuCoin Tuesday

article-image

Judge Failla found that Coinbase didn’t operate as an unregistered broker in offering its wallet service

article-image

A fund by Laser Digital offers investors exposure to the Polygon network, while a new 21Shares ETP focuses on staking rewards from Toncoin