Root
Blockchain News
The 4th Largest Crypto Theft Shows DeFi Weakness as Hacker Nets USD 325M in a Wormhole

The 4th Largest Crypto Theft Shows DeFi Weakness as Hacker Nets USD 325M in a Wormhole

Do repost and rate:

Rated:89

The DeFi bridge between Solana (SOL) and other blockchains Wormhole lost wETH 120,000 (USD 325m) in a hack, once again stressing the weaknesses of this nascent sector. The team offered the hacker a USD 10m bounty if they return the funds.

In their latest (12:41 AM UTC), Wormhole confirmed that the vulnerability has been patched and they "are working to get the network back up as soon as possible."

crypto analytics firm Elliptic, this is the fourth largest crypto theft of all time, and the second-largest theft from a DeFi service. According to the analysts, the exploit appears to have allowed the attacker to mint 120,000 wrapped ETH on the Solana blockchain, ETH 93,750 of which was then transferred to the blockchain.

"This demonstrates once again that the security of DeFi services has not reached a level that is appropriate for the huge sums being stored within them," Tom Robinson, Co-founder of Elliptic, Bloomberg. "The transparency of the blockchain is allowing attackers to identify and exploit major bugs."

Wormhole claims it has integrated seven blockchains - Ethereum, Solana, Terra, BINANCE Smart Chain, PolygonAvalanche, and Oasis - and has USD 1bn in total value locked.

Per their website there are two features built on top of the generic message-passing protocol including:

A token bridge that allows users to bridge wrapped assets between supported chains.
An NFT bridge that allows ERC721 and SPL NFTs to be transferred between Ethereum, Binance Smart Chain, Polygon, Avalanche, Oasis, and Solana.

Someone claiming to be a victim has sent a message to the attacker in an ethereum transaction: pic.twitter.com/R60OMFDs84
— Tom Robinson (@tomrobin) February 2, 2022