Blockchain bridge Wormhole confirms a hacker stole $322M worth of ETH and moves its site into maintenance mode; Wormhole is offering a $10M “bug bounty”

A threat actor has abused a vulnerability in the Wormhole cryptocurrency platform to steal an estimated $322 million worth of Ether currency.

The Record 2022-02-03 Catalin Cimpanu

Context & Ripple Effects

Wormhole’s disclosure puts a cross-chain service into an immediate security response: the site is in maintenance mode, while the project pairs the confirmed loss with a $10M bounty. Later coverage records that its parent replaced the stolen ETH and resumed bridge operations after a patch, making the incident a test of whether a bridge operator can restore both assets and service.

The longer case history did not end with restoration. Jump Crypto later recovered roughly 120,000 ether tied to the exploit after an upgraded DeFi contract and a UK high court order, showing that remediation extended beyond the initial technical fix.

First-order effects

Wormhole users face an interrupted service while the team contains the exploited vulnerability and maintains the site in maintenance mode.
Wormhole is putting a $10M price on vulnerability information, while its parent ultimately bears the immediate balance-sheet burden of replacing the stolen ETH.

Second-order effects

A patched and recapitalized Wormhole can resume operations, but the episode makes security review and asset backing central to how users assess the bridge.
Recovery efforts shift the response from a one-time loss toward coordination among Wormhole’s backers, DeFi-contract operators, and legal authorities to pursue stolen assets.

Third-order effects

The incident points to cross-chain bridges being judged not only on interoperability but also on their ability to fund losses, patch quickly, and sustain recovery actions after an exploit.
If this response pattern persists, bridge operators and their financial backers will face stronger pressure to treat exploit remediation as an operating capability rather than an exceptional event.

The trend: Cross-chain crypto infrastructure is moving toward a model in which technical security, sponsor-backed restitution, and legal recovery jointly determine user trust after exploits.

Discussion

@wormholecrypto @wormholecrypto on x
The wormhole network was exploited for 120k wETH. ETH will be added over the next hours to ensure wETH is backed 1:1. More details to come shortly. We are working to get the network back up quickly. Thanks for your patience.
@kelvinfichter @kelvinfichter on x
Alright. I figured out the Solana x Wormhole Bridge hack. ~300 million dollars worth of ETH drained out of the Wormhole Bridge on Ethereum. Here's how it happened.
@wormholecrypto @wormholecrypto on x
The vulnerability has been patched. We are working to get the network back up as soon as possible.
@hexcowboy @hexcowboy on x
not the wormhole hacker buying BAYCs 😂 https://twitter.com/...
@ivanthek @ivanthek on x
In the metaverse, “escrow” doesn't mean Jack Squat. Lingering question here is: Who bears the loss of this theft? https://www.cnbc.com/...
@markgongloff Mark Gongloff on x
“DeFi” is short for “DeFiNitely Getting Ripped Off” https://www.bloomberg.com/...
@campuscodi Catalin Cimpanu on x
Cryptocurrency platform Wormfole loses $322 million in another blockchain bridge exploit -Incident now ranks as the largest crypto-heist of 2022 -Also ranks as the 2nd largest DeFi platform hack of all time https://therecord.media/... https://twitter.com/...
@kelvinfichter @kelvinfichter on x
It's interesting that this commit was made ~9 hours ago and the exploit happened a few hours after that. Possible that an attacker was keeping an eye on the repository and looking out for suspicious commits.
@sbyrnes @sbyrnes on x
A big problem with crypto is it's ideal of programmatic money. We don't yet know how to write bug free software at scale, so bugs like this will always exist. However, there is also no one to appeal to if you lost all your money to a big like this. It's the worst of all worlds. h…
@caseynewton Casey Newton on x
I feel terribly for everyone involved but I would also think twice about uploading all my money to something called Wormhole https://t.co/L8xH0KgZwp
@silvermanjacob Jacob Silverman on x
Imagine if big banks were getting hacked for tens or hundreds of millions of $$ each week but also nothing was insured, there were no systems in place to mitigate fallout, and half of the hacks were inside jobs. That's basically DeFi.
@pt Parker on x
Robbing trains in the crypto Wild West seems like it would be fun. https://twitter.com/...
@silvermanjacob Jacob Silverman on x
“The post didn't elaborate on where they would get the Ether.” https://www.bloomberg.com/...
@gossithedog Kevin Beaumont on x
You could fund actual wars via cryptocurrency hacks. And I suspect it's less ‘could’ and more 'will. https://twitter.com/...
@mattbinder Matt Binder on x
yes $325 million was stolen via an exploit on a blockchain bridge. but don't worry! they simultaneously just happened to find an extra $325 million to replace it all with. https://twitter.com/...
@crypto @crypto on x
In another example of the fragility of some of the buzziest projects in DeFi, hackers may have drained a project known as Wormhole of as much as $315 million https://www.bloomberg.com/...
@silvermanjacob Jacob Silverman on x
Offering a thief a $10m bounty for the return of the $250m they stole seems like a tough negotiating position to start from. https://www.coindesk.com/...
@carsonturner Carson on x
They offered $10 mill in a Whitehat hacker payment... I think we're about to see 300 mill hit Tornado Cash. https://twitter.com/...
@austin_federa @austin_federa on x
This is a heroic effort to bring wETH back to 1:1 True commitment to your product is covering a 120k eth hack. Props to @wormholecrypto on doing the right, hard, expensive thing. https://twitter.com/...
@david_jolly_dc @david_jolly_dc on x
Wormhole pledged to ensure the wETH is backed one-for-one and get the network back up. It didn't elaborate on where it would get the Ether. DeFi Project Known as Wormhole Hit With a Potential $315 Million #Crypto Hack https://www.bloomberg.com/...
@markjeffrey Mark Jeffrey on x
$320M hacked / stolen from Solana's Wormhole bridge. Between the ongoing continual chain crashes and now this, #Solana is not having a good time. There are now questions as to whether SOL ETH is now backed by anything, since the collateral was stolen. https://www.cnbc.com/...
@joshuatopolsky Joshua Topolsky on x
Web3 going well I see https://twitter.com/...
@dogetoshi Steven on x
Wormhole is guaranteeing a 1:1 backing. Wormhole ETH is still trading a deep discount. https://twitter.com/... https://twitter.com/...
@coindesk @coindesk on x
UPDATE: @wormholecrpyto confirmed in a tweet that 120,000 ETH ($326 million) was pilfered in the exploit. The team said funds would be added to the bridge to ensure ETH on Solana will remain backed, though the source of those funds was not disclosed. https://t.co/3Cr0XC3igm

Chronicles