Incident reportBridge exploitSolana / Ethereum
Wormhole −$325M
120,000 ETH minted out of thin air.
What happened
A signature-check flaw in the Wormhole bridge let an attacker mint 120,000 wrapped ETH on Solana without depositing anything, then cash much of it out.
Timeline
Feb 2
Wrapped ETH is minted on Solana with no ETH behind it.
Feb 3
Jump Crypto puts back the missing 120,000 ETH.
Aftermath
A backer covered the hole within a day, so users weren't left holding unbacked tokens.
Date2022-02-02
Lost$325M
WhoUnknown
Rich friends count as a security model.
Lesson A bridge is a vault with two doors.