Wormhole Parent Commits $320M Ether to Replace Massive DeFi Hack Losses

Wormhole’s bridging portal is running again after it patched the vulnerability, the protocol stated

article-image

Source: Shutterstock

share
  • The total value locked on Solana fell about 12.3% from $8.55 billion Wednesday to $7.5 billion Thursday, according to DeFiLlama data
  • The ether was exploited from a smart contract, not “taken” from an Ethereum address, a Wormhole admin said

Wormhole’s parent company has dug the DeFi protocol out of a $320 million hole.

Jump Crypto replaced all 120,000 ether Wormhole lost Wednesday in the second biggest decentralized finance hack to date, a spokesperson told Blockworks. The decision by Jump Crypto, which is owned by Jump Trading, to replenish the missing funds may have headed off long-term damage to the Solana blockchain.

The total value locked (TVL) on Solana fell about 12.3% from $8.55 billion Wednesday to $7.5 billion Thursday, according to DeFi Llama data.

“[Jump Crypto] believes in a multichain future and that [Wormhole] is essential infrastructure,” the company wrote in a tweet. “That’s why we replaced 120k ETH to make community members whole and support Wormhole now as it continues to develop.”

Wormhole is one of the largest cross-chain bridges between Solana and other blockchains. It has over $1 billion in TVL and supports six blockchains: Terra, Solana, Ethereum, Binance Smart Chain, Avalanche and Polygon.

Its portal shut down for a few hours Wednesday as the company worked to patch the network vulnerability.

By 8:30 am ET Thursday, the portal’s token bridge was again operational. 

“All wETH has been restored,” a Wormhole admin, who goes by the username d231d, wrote in its Telegram group Wednesday.

The hacker’s Ethereum address hasn’t been used since transferring the tokens to their wallet, according to Etherscan data.

The ether was exploited from a smart contract, not “taken” from an Ethereum address, the admin said. The exploit took place over three different transactions, Blockworks reported.

When a user transfers assets between blockchains, the bridge steps in to lock the transaction and mint a wrapped version, such as wrapped ether (wETH), to its final chain.

Etherscan added a disclaimer to the address’ page: “There have been reports that this address is involved in the Wormhole network exploit. Please proceed with caution.”

The protocol said it plans to release an in-depth report with further details “ASAP.”

Jump Crypto President Kanav Kariya said in a tweet that Wormhole would come out “stronger than ever.”

Loading Tweet..

Wormhole said an ether contract was filled and will ensure that all wETH is backed in a 1-to-1 ratio to ensure exchangeability with the native ether.

Wormhole sent an on-chain message to the hacker after the exploit, offering a reward for the return of the tokens.

It is still unclear whether the exploiter responded. Neither the admin or protocol immediately returned a request for comment.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 24 - 26, 2026

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Research Report Templates (8).png

Research

Kinetiq has established itself as Hyperliquid's dominant liquid staking protocol, holding 82.5% of LST market share with $610M in TVL. The protocol is now expanding beyond its kHYPE staking core into higher take-rate verticals: iHYPE for institutional custody rails, Launch for HIP-3 capital formation, and Markets for builder-deployed perpetuals. We view Markets, launching Jan. 12, as the highest-potential product line given its mechanically scalable, activity-linked unit economics. Near-term revenue remains anchored by kHYPE's KIP-2 fee schedule (~$1.6M annualized), while Markets provides embedded optionality if HIP-3 economics normalize post-Growth Mode. KNTQ's setup is relatively clean: zero insider unlocks until November 2026, 6.2% buyback yield from staking revenue, and cleared airdrop overhang. Risks center on unproven Markets execution, declining kHYPE TVL despite ongoing incentives, and competition from Hyperliquid's native initiatives.

article-image

BTC finished the week up 1.6%, while L2s, RWAs and the treasury trade continued to grind lower

article-image

DTCC moves DTC-custodied Treasuries onchain via Canton, while Lighter’s LIT launches trading at a fees multiple in Hyperliquid territory

article-image

In the 90s, rapt audiences worldwide watched a coffee pot — will that fascination ever turn to crypto?

article-image

Some systems improve by failing — and crypto has no choice

article-image

Yield Basis introduces an IL-free AMM design that already dominates BTC DEX liquidity

article-image

Maybe tokenholders don’t need the rights that corporate shareholders have come to expect

Newsletter

The Breakdown

Decoding crypto and the markets. Daily, with Byron Gilliam.

Blockworks Research

Unlock crypto's most powerful research platform.

Our research packs a punch and gives you actionable takeaways for each topic.

SubscribeGet in touch

Blockworks Inc.

133 W 19th St., New York, NY 10011

Blockworks Network

NewsPodcastsNewslettersEventsRoundtablesAnalytics