Article 5VSPW How $323M in crypto was stolen from a blockchain bridge called Wormhole

How $323M in crypto was stolen from a blockchain bridge called Wormhole

by
Dan Goodin
from Ars Technica - All content on (#5VSPW)
wormhole-heist-800x450.jpg

Enlarge (credit: Aurich Lawson | Getty Images)

This is a story about how a simple software bug allowed the fourth-biggest cryptocurrency theft ever.

Hackers stole more than $323 million in cryptocurrency by exploiting a vulnerability in Wormhole, a Web-based service that allows inter-blockchain transactions. Wormhole lets people move digital coins tied to one blockchain over to a different blockchain; such blockchain bridges are particularly useful for decentralized finance (DeFi) services that operate on two or more chains, often with vastly different protocols, rules, and processes.

A guardian with no teeth

Bridges use wrapped tokens, which lock tokens in one blockchain into a smart contract. After a decentralized cross-chain oracle called a "guardian" certifies that the coins have been properly locked on one chain, the bridge mints or releases tokens of the same value on the other chain. Wormhole bridges the Solana blockchain with other blockchains, including those for Avalanche, Oasis, Binance Smart Chain, Ethereum, Polygon, and Terra.

Read 20 remaining paragraphs | Comments

index?i=RdGlRaWZQE0:wjpY_x8L6gs:V_sGLiPB index?i=RdGlRaWZQE0:wjpY_x8L6gs:F7zBnMyn index?d=qj6IDK7rITs index?d=yIl2AUoC8zA
External Content
Source RSS or Atom Feed
Feed Location http://feeds.arstechnica.com/arstechnica/index
Feed Title Ars Technica - All content
Feed Link https://arstechnica.com/
Reply 0 comments