Blockchain bridge Wormhole has confirmed that roughly $320 million worth of cryptocurrency has been stolen following a hack discovered on Wednesday.
Wormhole is a bridge that connects various blockchains, including Ethereum, Solana, Terra, Binance Smart Chain, Polygon, Avalanche, and Oasis. One of its main features is a token bridge that allows users to bridge wrapped assets between these blockchains.
The service announced on Wednesday that the Wormhole network had been shut down “for maintenance” as it had started looking into a potential exploit.
The attacker apparently used an exploit that has since been patched to mint 120,000 wrapped Ethereum (wETH) on the Solana blockchain, much of which was then transferred to the Ethereum blockchain. The 120,000 wETH was worth roughly $320 million at the time of the attack.
Wormhole developers have apparently offered the attacker a $10 million bug bounty through a “whitehat agreement” if they return the stolen cryptocurrency.
Wormhole has promised to share a detailed incident report. In a few messages shared on Twitter on Thursday, the service said it had restored all funds and the network. The funds were restored with the help of Jump Crypto, the crypto division of Jump Trading Group.
This appears to be the second-largest cryptocurrency heist. The largest took place in August 2021, when Poly Network announced that someone had stolen roughly $600 million worth of cryptocurrency. However, in that case, nearly all of the stolen funds were returned days later.
*updated to add that the funds were contributed by Jump Crypto
Related: The Curious Case of the $600 Million Crypto Heist
Related: North Korean Hackers Stole $400 Million Worth of Cryptocurrency in 2021
Related: Hackers Steal $150 Million Worth of Cryptocurrency From BitMart
Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
More from Eduard Kovacs
- Industry Reactions to Hive Ransomware Takedown: Feedback Friday
- US Reiterates $10 Million Reward Offer After Disruption of Hive Ransomware
- Hive Ransomware Operation Shut Down by Law Enforcement
- UK Gov Warns of Phishing Attacks Launched by Iranian, Russian Cyberspies
- Dozens of Cybersecurity Companies Announced Layoffs in Past Year
- Security Update for Chrome 109 Patches 6 Vulnerabilities
- New Open Source OT Security Tool Helps Address Impact of Upcoming Microsoft Patch
- Forward Networks Raises $50 Million in Series D Funding
Latest News
- Critical Vulnerability Impacts Over 120 Lexmark Printers
- BIND Updates Patch High-Severity, Remotely Exploitable DoS Flaws
- Industry Reactions to Hive Ransomware Takedown: Feedback Friday
- Microsoft Urges Customers to Patch Exchange Servers
- Iranian APT Leaks Data From Saudi Arabia Government Under New Persona
- US Reiterates $10 Million Reward Offer After Disruption of Hive Ransomware
- Cyberattacks Target Websites of German Airports, Admin
- US Infiltrates Big Ransomware Gang: ‘We Hacked the Hackers’
