Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Over $300 Million in Cryptocurrency Stolen in Wormhole Hack

Blockchain bridge Wormhole has confirmed that roughly $320 million worth of cryptocurrency has been stolen following a hack discovered on Wednesday.

Blockchain bridge Wormhole has confirmed that roughly $320 million worth of cryptocurrency has been stolen following a hack discovered on Wednesday.

Wormhole is a bridge that connects various blockchains, including Ethereum, Solana, Terra, Binance Smart Chain, Polygon, Avalanche, and Oasis. One of its main features is a token bridge that allows users to bridge wrapped assets between these blockchains.

The service announced on Wednesday that the Wormhole network had been shut down “for maintenance” as it had started looking into a potential exploit.

The attacker apparently used an exploit that has since been patched to mint 120,000 wrapped Ethereum (wETH) on the Solana blockchain, much of which was then transferred to the Ethereum blockchain. The 120,000 wETH was worth roughly $320 million at the time of the attack.

Wormhole developers have apparently offered the attacker a $10 million bug bounty through a “whitehat agreement” if they return the stolen cryptocurrency.

Wormhole has promised to share a detailed incident report. In a few messages shared on Twitter on Thursday, the service said it had restored all funds and the network. The funds were restored with the help of Jump Crypto, the crypto division of Jump Trading Group.

This appears to be the second-largest cryptocurrency heist. The largest took place in August 2021, when Poly Network announced that someone had stolen roughly $600 million worth of cryptocurrency. However, in that case, nearly all of the stolen funds were returned days later.

*updated to add that the funds were contributed by Jump Crypto

Related: The Curious Case of the $600 Million Crypto Heist

Related: North Korean Hackers Stole $400 Million Worth of Cryptocurrency in 2021

Related: Hackers Steal $150 Million Worth of Cryptocurrency From BitMart

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Expert Insights

Related Content

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

A new study by McAfee and the Center for Strategic and International Studies (CSIS) named a staggering figure as the true annual cost of...

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Cybercrime

Video games developer Riot Games says source code was stolen from its development environment in a ransomware attack

Cybercrime

CISA, NSA, and MS-ISAC issued an alert on the malicious use of RMM software to steal money from bank accounts.

Cybercrime

Chinese threat actor DragonSpark has been using the SparkRAT open source backdoor in attacks targeting East Asian organizations.

Cybercrime

Artificial intelligence is competing in another endeavor once limited to humans — creating propaganda and disinformation.