Wormhole Bridge Exploit
Wormhole
Critical
Resolved
February 2, 2022
Smart Contract
$320,000,000.00
Description
An attacker exploited a vulnerability in Wormhole's smart contract validation logic, minting 120,000 wETH on Solana without proper backing on Ethereum.
Technical Details
The exploit occurred due to a signature verification vulnerability where the attacker was able to forge a valid signature for a VAA (Validator Action Approval) message.
Bridge
Cross-chain
Signature Verification
Exploit Timeline
Exploit Executed
Attacker exploited the signature verification to mint 120,000 wETH.
Bridge Halted
Wormhole team halted bridge operations.
Funds Replaced
Jump Crypto added 120,000 ETH to restore bridge solvency.
On-Chain Details
Protection Resources
Smart Contract Security Checklist
Essential checks for contract developers
Oracle Attack Prevention Guide
Learn to prevent oracle manipulation
Emergency Response Playbook
Quick response guide for projects