{"investigation":{"slug":"wormhole","entity_name":"Wormhole","trust_score":51,"severity_base":null,"score_modifier":9,"confidence":0.87,"status":"published","content_type":"investigation","summary":"Wormhole is a cross-chain messaging and token bridge protocol connecting more than 30 blockchains, originally developed by Certus One and later backed by Jump Crypto. On February 2, 2022, an attacker exploited a signature verification flaw in its Solana contracts to mint 120,000 wETH (reported at roughly $320–326 million) without collateral; Jump Crypto replenished the funds within about a day, and a court-ordered counter-exploit via Oasis recovered about $140 million in February 2023. The project has since added layered security controls, separated from Jump Trading, raised $225 million at a $2.5 billion valuation and launched the W governance token in April 2024; the remaining stolen funds are largely unrecovered.","sections":[{"content":"Wormhole (also referred to as Wormhole Bridge) is a generic cross-chain messaging and token bridge protocol that enables the transfer of arbitrary data and token value across a growing set of blockchains. As of 2025, Wormhole supports more than 30 networks including Ethereum, Solana, BNB Chain, Polygon, Avalanche, Arbitrum, Optimism, Base, Fantom, Aptos, and others. The protocol was originally developed by Certus One, which was acquired by Jump Trading in August 2021, bringing Wormhole under Jump Crypto's stewardship.\n\nWormhole's core architecture relies on a set of 19 validator nodes called Guardians. Each Guardian independently observes messages emitted by Wormhole's on-chain smart contracts across all supported chains. When a supermajority of 13 out of 19 Guardians cryptographically sign the same message, the network produces a Validator Action Approval (VAA), which functions as a proof enabling message delivery and asset minting on the destination chain. This guardian-based proof-of-authority model differs from fully trustless bridge designs, and the signature verification step was where the 2022 exploit occurred.\n\nBeyond token bridging, Wormhole positions itself as a cross-chain messaging layer, with products including Native Token Transfers (NTT), which allows token issuers to maintain native token supply across chains without liquidity pools, and a Connect SDK for integrating cross-chain functionality into decentralized applications.","heading":"Protocol Overview","sources":[{"url":"https://eco.com/support/en/articles/13052583-understanding-wormhole-the-cross-chain-protocol-connecting-blockchains","name":"Understanding Wormhole: The Cross-Chain Protocol Connecting Blockchains","type":"other","credibility":2},{"url":"https://financefeeds.com/wormhole-bridges-how-cross-chain-transfers-work/","name":"Wormhole Bridges: How Cross-Chain Transfers Work","type":"other","credibility":2},{"url":"https://wormhole.com/products/native-token-transfers","name":"Wormhole Native Token Transfers Product Page","type":"official","credibility":1}],"severity":"low"},{"content":"On February 2, 2022, an unknown attacker exploited a critical vulnerability in Wormhole's Solana-side smart contracts, minting 120,000 wrapped ETH (wETH) on Solana without depositing any corresponding ETH collateral on Ethereum. Reports differ on the value: the survivor page's sources put it at approximately $326 million (CoinDesk headline), CNBC and other outlets reported about $320 million, Bloomberg's first report described a potential $315 million hack, and the Wormhole Bridge page gave a range of $320–326 million. The exploit has been described both as the largest hack in Solana ecosystem history at the time and as the second-largest DeFi protocol theft in history up to that point.\n\nThe vulnerability was an account confusion flaw stemming from Wormhole's use of a deprecated, unchecked Solana function, load_instruction_at. Signature verification flowed from the post_vaa instruction to verify_signatures, which relied on a call to Solana's Secp256k1 program. The deprecated function was used to confirm that a Secp256k1 verification instruction had been included in the transaction, but it does not validate whether the account it reads from is the real Instructions sysvar. The attacker constructed a counterfeit sysvar account pre-loaded with data that made it appear a valid Secp256k1 call had been made. The forged account was accepted by verify_signatures, producing a valid SignatureSet (and from it a fraudulent VAA) without any legitimate guardian signatures. The attacker then called complete_wrapped to mint 120,000 wETH on Solana.\n\nAccording to analyses cited on the Wormhole Bridge page, a fix for this exact vulnerability had been committed to Wormhole's public GitHub repository but had not yet been deployed to mainnet, raising the possibility that the attacker identified the flaw by reviewing the undeployed patch; this remains unconfirmed.\n\nThe attacker received approximately 0.94 ETH from Tornado Cash before the attack, likely to cover transaction fees. After minting, the attacker bridged 93,750 wETH back to Ethereum and redeemed it for native ETH, sent to Ethereum address 0x629e7da20197a5429d30da36e77d06cdf796b71a (labeled 'Wormhole Network Exploiter' on Etherscan), which held 93,750.97 ETH after the attack. Accounts of the Solana-side holdings differ: the Wormhole page describes the remaining approximately 26,250 wETH equivalent as held in Solana wallet CxegPrfn2ge5dNiQberUrQJkHCcimeR4VXkeawcFBBka, while the Wormhole Bridge page reports that the same wallet held 432,662.14 SOL.\n\nThe Wormhole team embedded a $10 million bounty offer in a transaction sent to the attacker's wallet, offering the payment in exchange for returning the funds and providing exploit details; the attacker did not accept.","heading":"February 2022 Exploit — Signature Verification Bypass","sources":[{"url":"https://www.halborn.com/blog/post/explained-the-wormhole-hack-february-2022","name":"Explained: The Wormhole Hack — Halborn","type":"research","credibility":2},{"url":"https://www.coindesk.com/tech/2022/02/02/blockchain-bridge-wormhole-suffers-possible-exploit-worth-over-250m","name":"Blockchain Bridge Wormhole Suffers Possible Exploit Worth Over $326M — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.bloomberg.com/news/articles/2022-02-02/blockchain-bridge-wormhole-hit-with-potential-315-million-hack","name":"Blockchain Bridge Wormhole Hit With Potential $315 Million Hack — Bloomberg","type":"other","credibility":3},{"url":"https://www.chainalysis.com/blog/wormhole-hack-february-2022/","name":"Wormhole Hack: Lessons From The Wormhole Exploit — Chainalysis","type":"research","credibility":2},{"url":"https://www.cnbc.com/2022/02/02/320-million-stolen-from-wormhole-bridge-linking-solana-and-ethereum.html","name":"$320 million stolen from Wormhole — CNBC","type":"news_article","credibility":1},{"url":"https://certik.medium.com/wormhole-bridge-exploit-analysis-5068d79cbb71","name":"Wormhole bridge exploit analysis — CertiK","type":"research","credibility":2},{"url":"https://www.certik.com/resources/blog/wormhole-bridge-exploit-incident-analysis","name":"Wormhole Bridge Exploit Incident Analysis — CertiK","type":"other","credibility":3},{"url":"https://kudelskisecurity.com/research/quick-analysis-of-the-wormhole-attack","name":"Quick Analysis of the Wormhole Attack — Kudelski Security","type":"research","credibility":2},{"url":"https://immunebytes.com/blog/wormhole-bridge-hack-feb-2-2022-detailed-hack-analysis/","name":"Wormhole Bridge Hack (Feb 2, 2022) Detailed Hack Analysis — ImmuneBytes","type":"other","credibility":3},{"url":"https://etherscan.io/address/0x629e7da20197a5429d30da36e77d06cdf796b71a","name":"Wormhole Network Exploiter — Etherscan","type":"on_chain","credibility":1}],"severity":"critical"},{"content":"Within approximately 24 hours of the exploit, Jump Crypto — the crypto arm of Chicago-based trading firm Jump Trading, which had acquired Wormhole's original developer Certus One in August 2021 — deposited 120,000 ETH into the Wormhole bridge, fully replenishing the stolen collateral. Jump Crypto stated: 'Jump Crypto believes in a multichain future and that Wormhole is essential infrastructure. That's why we replaced 120K ETH to make community members whole and support Wormhole now as it continues to develop.' The action was widely described as the largest DeFi 'bailout' to that date. The bridge reopened after the vulnerability was patched.\n\nThe exploit posed systemic risk to the Solana DeFi ecosystem because many Solana-based lending and trading protocols accepted wETH as collateral. Had Jump Crypto not replenished the funds, the 120,000 wETH on Solana would have been unbacked, creating the potential for mass liquidations, cascading insolvencies and a depeg of the asset. The incident highlighted concentration risk in cross-chain bridge infrastructure, where a single smart contract vulnerability can threaten every downstream protocol that depends on the bridge. Chainalysis cited the hack as part of a broader pattern of cross-chain bridge attacks that dominated the 2022 DeFi exploit landscape. The protocol had previously been described as securing up to $10 billion in cross-chain assets at its peak.","heading":"Jump Crypto Bailout and Systemic Risk","sources":[{"url":"https://cointelegraph.com/news/jump-crypto-replenishes-funds-from-320m-wormhole-hack-in-largest-ever-defi-bailout","name":"Jump Crypto replenishes funds — CoinTelegraph","type":"news_article","credibility":1},{"url":"https://www.coindesk.com/business/2022/02/03/jump-trading-backstops-wormholes-320m-exploit-loss-sources","name":"Jump Trading Backstops Wormhole's $320M Exploit Loss — CoinDesk","type":"news_article","credibility":1},{"url":"https://fortune.com/2022/02/04/320-million-crypto-hack-blockchain-ether-jump-trading-wormhole-refund-customer-losses/","name":"Wormhole hack — Fortune","type":"news_article","credibility":1},{"url":"https://www.bloomberg.com/news/articles/2022-02-03/jump-trading-seen-as-replenishing-stolen-amount-in-wormhole-hack","name":"Jump Crypto Replenishes $320 Million — Bloomberg","type":"news_article","credibility":1},{"url":"https://decrypt.co/92709/jump-crypto-wormhole-defi","name":"Jump Crypto and Wormhole — Decrypt","type":"other","credibility":3},{"url":"https://www.chainalysis.com/blog/wormhole-hack-february-2022/","name":"Wormhole Hack: Lessons From The Wormhole Exploit — Chainalysis","type":"research","credibility":2},{"url":"https://www.cbsnews.com/news/wormhole-ether-cryptocurrency-320-million-hack/","name":"Wormhole ether cryptocurrency $320 million hack — CBS News","type":"other","credibility":3},{"url":"https://www.merklescience.com/blog/hack-track-analysis-of-wormhole-token-bridge-exploit","name":"Hack Track: Analysis of Wormhole Token Bridge Exploit — Merkle Science","type":"other","credibility":3}],"severity":"high"},{"content":"The following on-chain addresses have been publicly identified in connection with the February 2022 exploit:\n\n- Primary Ethereum exploiter address: 0x629e7da20197a5429d30da36e77d06cdf796b71a (labeled 'Wormhole Network Exploiter' on Etherscan)\n- Primary Solana exploiter address: CxegPrfn2ge5dNiQberUrQJkHCcimeR4VXkeawcFBBka\n- Intermediate Ethereum address used during laundering: 0x8184ef7a6e54c72f56577a45adc5aed68037af51\n- Final Ethereum destination address: 0xe3174149f80d1ea429970ec5043e361bc003ddbd\n\nThe stolen funds remained dormant for nearly one year. On January 14, 2023, the exploiter's accounts on Ethereum and Solana became active within approximately one hour of each other. On Solana, approximately 202,651 SOL and 2,683,305 USDCet were moved to new accounts and bridged to Ethereum. Around January 23, 2023, 95,630 ETH (reported as roughly $155 million) was sent to decentralized exchanges including OpenOcean and 1inch and converted into Lido Finance's staked ETH (stETH) and wrapped stETH (wstETH). Sources differ on the timing of the conversion: the Wormhole page dates it to January 23, 2023, while the Wormhole Bridge page places the start of the conversion via OpenOcean on January 14, 2023. The exploiter then used approximately 25,000 wstETH as collateral on MakerDAO to borrow approximately 14.5 million DAI, and cycled the borrowed DAI into additional stETH in a recursive, leveraged collateralization strategy.\n\nAs of Elliptic's early-2023 report, the exploiter held approximately 71,407 wstETH, making them the third-largest holder of wstETH on Ethereum at the time. A portion of these assets was subsequently seized through the court-ordered Oasis counter-exploit in February 2023 (see below). The remaining unrecovered funds continue to be tracked by blockchain analytics firms.","heading":"Stolen Fund Movements and On-Chain Addresses","sources":[{"url":"https://www.elliptic.co/blog/analysis/stolen-funds-from-the-wormhole-hack-on-the-move-after-laying-dormant-for-almost-a-year","name":"Stolen funds from Wormhole hack on the move — Elliptic","type":"research","credibility":2},{"url":"https://etherscan.io/address/0x629e7da20197a5429d30da36e77d06cdf796b71a","name":"Wormhole Network Exploiter — Etherscan","type":"on_chain","credibility":1},{"url":"https://cointelegraph.com/news/wormhole-hacker-moves-155m-in-biggest-shift-of-stolen-funds-in-months","name":"Wormhole hacker moves $155M — CoinTelegraph","type":"news_article","credibility":1},{"url":"https://www.trmlabs.com/resources/blog/solana-wormhole-compromise-120k-stolen-eth","name":"Solana Wormhole Compromise — TRM Labs","type":"research","credibility":2},{"url":"https://crypto.news/wormhole-attackers-transfer-2-9m-usdc-to-a-new-wallet-address-months-after-hack/","name":"Wormhole attackers transfer $2.9M USDC to new wallet — Crypto.news","type":"news_article","credibility":2}],"severity":"high"},{"content":"On February 21, 2023, the High Court of England and Wales issued an injunction directing Oasis (oasis.app), a DeFi front-end in the MakerDAO ecosystem, to take all necessary steps to retrieve assets associated with the Wormhole exploit wallet. Oasis and Jump Crypto, acting as the court-authorized third party, then executed a counter-exploit against the attacker's Oasis vaults. Oasis disclosed that it used a previously undisclosed capability in the design of its own admin multisig; the Wormhole Bridge page describes this as an upgrade path in Oasis's smart contracts, which used an upgradeable proxy pattern controlled by a 4-of-12 multisig. The operation recovered approximately $140 million in assets, net of repaid DAI debt, which were transferred to a wallet controlled by the court-authorized third party. Sources differ on the date of the counter-exploit: the Wormhole page dates it to February 24, 2023 (the date of CoinDesk's report), while the Wormhole Bridge page places it on February 21, 2023, the day of the court order.\n\nThe action generated significant controversy in the DeFi community over the precedent of court-mandated smart contract intervention, DeFi 'immutability' guarantees, and the centralization risks of nominally decentralized protocols, since Oasis was able to access user vaults unilaterally under judicial order.","heading":"Court-Ordered Counter-Exploit and Fund Recovery","sources":[{"url":"https://www.coindesk.com/business/2023/02/24/oasis-exploits-its-own-wallet-software-to-seize-crypto-stolen-in-wormhole-hack","name":"Oasis Exploits Its Own Wallet Software — CoinDesk","type":"news_article","credibility":1},{"url":"https://blockworks.com/news/jump-crypto-wormhole-hack-recovery","name":"Jump Crypto Counter-Exploited Wormhole Hacker for $140M — Blockworks","type":"news_article","credibility":2},{"url":"https://www.elliptic.co/blog/analysis/stolen-funds-from-the-wormhole-hack-on-the-move-after-laying-dormant-for-almost-a-year","name":"Stolen funds from Wormhole hack on the move — Elliptic","type":"research","credibility":2},{"url":"https://www.cryptotimes.io/2023/02/27/wormhole-hacker-suffers-counter-exploit-from-jump-crypto-and-oasis-app/","name":"Wormhole hacker suffers counter-exploit from Jump Crypto and Oasis.app — The Crypto Times","type":"other","credibility":3},{"url":"https://www.citationneeded.news/oasis-defi-centralization/","name":"Oasis and DeFi centralization — Citation Needed","type":"other","credibility":3}],"severity":"high"},{"content":"No direct criminal charges or regulatory enforcement actions have been publicly identified against Wormhole or Wormhole Labs as of mid-2026. Legal proceedings related to the hack have been primarily civil. Beyond the February 2023 English High Court injunction, the exploiter filed a counter-claim in those proceedings, and in March 2024 a New York court issued a judgment declaring that victims of the hack hold a proprietary right and interest in the stolen assets, a ruling that could support future recovery efforts.\n\nJump Crypto, which backstopped the hack losses and was Wormhole's parent organization at the time, subsequently faced separate regulatory scrutiny. In June 2024, Fortune reported that the U.S. Commodity Futures Trading Commission (CFTC) had opened an investigation into Jump Crypto; Jump Crypto President Kanav Kariya resigned shortly thereafter. In December 2024, the SEC charged Jump's offshore entity Tai Mo Shan Limited with misleading investors about the stability of Terraform Labs' UST stablecoin and with unregistered securities dealing in LUNA tokens; Jump agreed to settle for approximately $123 million. These actions related to the Terra/LUNA collapse, not the Wormhole hack, but reflect broader regulatory scrutiny of the firm that underwrote Wormhole's losses.","heading":"Regulatory and Legal Aftermath","sources":[{"url":"https://www.coindesk.com/business/2023/02/24/oasis-exploits-its-own-wallet-software-to-seize-crypto-stolen-in-wormhole-hack","name":"Oasis Exploits Its Own Wallet Software — CoinDesk","type":"news_article","credibility":1},{"url":"https://fortune.com/crypto/2024/06/20/cftc-jump-crypto-behnam-kanav-kariya-sec/","name":"CFTC probing Jump Crypto — Fortune","type":"news_article","credibility":1},{"url":"https://www.ccn.com/news/crypto/jump-crypto-cftc-scrutiny-series-high-profile-incidents/","name":"Jump Crypto Under CFTC Scrutiny — CCN","type":"news_article","credibility":2},{"url":"https://www.ccn.com/news/crypto/jump-crypto-president-resigns-amid-cftc-investigation/","name":"Jump Crypto President Resigns Amid CFTC Investigation — CCN","type":"news_article","credibility":2}],"severity":"high"},{"content":"Following the exploit, Wormhole patched the vulnerability in the immediate aftermath. Sources describe the replacement function differently: the Wormhole page says load_instruction_at was replaced with current_instruction_at, while the Wormhole Bridge page names load_instruction_at_checked as the secure alternative that validates the Instructions sysvar address. The bridge relaunched after the patch and Jump Crypto's replenishment.\n\nWormhole subsequently implemented a layered security architecture. The Guardian Network was supplemented by the Global Accountant, which performs integrity checks on every token transfer so that no chain can have more tokens minted or burned than were deposited, enforced by all 19 Guardians; and the Governor, which rate-limits asset outflows per chain per time period to contain the impact of any future exploit. As of July 2023, Wormhole reported completing 29 third-party security audits and made the reports public. Accounts of its bug bounty differ in form: the Wormhole Bridge page reports two separate $2.5 million bug bounty programs launched after the hack, while the Wormhole page describes an Immunefi program with a maximum payout of $5 million. Google Cloud was added as one of the 19 Guardian node operators, and Wormhole has announced work on zero-knowledge proof-based verification as a longer-term improvement. Wormhole was selected by the Uniswap DAO as one of two bridging protocols for cross-chain governance messaging, with the Uniswap Bridge Assessment Report acknowledging 'significant improvements' made in response to the exploit. In July 2023, TechCrunch reported on these rebuilding efforts.\n\nIn December 2023, CertiK discovered a separate vulnerability, put at $5 million, in the Wormhole bridge deployed on the Aptos blockchain, arising from an incorrect implementation of public(friend) and entry modifiers in the Move programming language. The flaw was patched within approximately three hours of disclosure and no funds were lost. As part of the fix, Wormhole reduced daily withdrawal limits from Aptos from $5 million to $1 million.","heading":"Security Improvements and the 2023 Aptos Vulnerability","sources":[{"url":"https://wormhole.com/platform/security","name":"Wormhole Security Page","type":"official","credibility":1},{"url":"https://techcrunch.com/2023/07/27/wormhole-new-security-320m-hack/","name":"Wormhole digs out of its hole — TechCrunch","type":"news_article","credibility":1},{"url":"https://wormhole.com/blog/wormhole-integrates-google-cloud-into-guardian-security-system","name":"Wormhole Integrates Google Cloud Into Guardian Security System","type":"official","credibility":1},{"url":"https://wormhole.com/docs/protocol/infrastructure/guardians/","name":"Guardians — Wormhole Docs","type":"official","credibility":1},{"url":"https://cointelegraph.com/news/certik-discovered-5-million-security-flaw-wormhole-bridge-aptos","name":"CertiK discovered $5 million security flaw in Wormhole bridge on Aptos — CoinTelegraph","type":"other","credibility":3},{"url":"https://beincrypto.com/security-flaw-aptos-wormhole-bridge/","name":"Security flaw in Aptos Wormhole bridge — BeInCrypto","type":"other","credibility":3},{"url":"https://wormhole.foundation/blog/report-on-certiks-aptos-related-bug-bounty-2","name":"Report on CertiK's Aptos-related bug bounty — Wormhole Foundation","type":"other","credibility":3},{"url":"https://immunefi.com/bug-bounty/wormhole/information/","name":"Wormhole Bug Bounty — Immunefi","type":"other","credibility":3}],"severity":"medium"},{"content":"In mid-2023, the Wormhole team began operating independently of Jump Trading. The team incorporated as Wormhole Labs in May 2023, and approximately 15 staff, most from Jump Crypto, left the firm in August 2023 to focus solely on the protocol. CEO Saeed Badreg and COO Anthony Ramirez left Jump Trading to lead Wormhole as an independent entity. Bloomberg first reported the separation in November 2023.\n\nAlso in November 2023, Wormhole announced a $225 million funding round at a $2.5 billion valuation — the largest crypto fundraise of 2023 by deal size. Investors included Brevan Howard, Coinbase Ventures, Multicoin Capital, ParaFi Capital, Dialectic, Borderless Capital, Arrington Capital, and Jump Trading (retaining a stake). The investment was structured as token warrants rather than equity, giving investors rights to a portion of the then-unlaunched W token supply.","heading":"Independence from Jump Trading and $225M Fundraise","sources":[{"url":"https://www.coindesk.com/business/2023/11/17/jump-trading-wormhole-part-ways-amid-tough-crypto-market-bloomberg","name":"Jump Trading, Wormhole Part Ways — CoinDesk","type":"news_article","credibility":1},{"url":"https://fortune.com/crypto/2023/11/29/wormhole-raises-225-million-2-5-billion-valuation-jump-crypto-split/","name":"Wormhole raises $225 million at $2.5 billion valuation — Fortune","type":"news_article","credibility":1},{"url":"https://www.coindesk.com/business/2023/11/29/blockchain-messaging-platform-wormhole-raises-225m-at-25b-valuation","name":"Wormhole raises $225M at $2.5B valuation — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.bloomberg.com/news/articles/2023-11-29/wormhole-jump-incubated-crypto-project-raises-at-2-5-billion-valuation","name":"Brevan Howard Backs Wormhole — Bloomberg","type":"news_article","credibility":1},{"url":"https://blockworks.co/news/wormhole-jump-trading-separate","name":"Wormhole execs depart Jump Trading — Blockworks","type":"news_article","credibility":2}],"severity":"low"},{"content":"In March 2024, Wormhole announced plans to distribute 617 million W tokens — 6.17% of a total supply of 10 billion — to past protocol users in an airdrop. The W token launched on April 3, 2024, with listings on Binance, Bybit, Bitget, OKX, Backpack, and Gate.io. W debuted at approximately $1.66, for a fully diluted valuation of approximately $3 billion.\n\nUnder the initial tokenomics, 82% of the total W supply was locked at launch with a four-year vesting schedule. Allocations included 5.1% to the Guardian Network (vested), 17% to the community (11% unlocked at TGE for the airdrop and early programs), and 11.6% to strategic network participants. The token is intended to power governance of the Wormhole DAO, with holders eventually gaining voting rights over protocol parameters and treasury management.\n\nIn September 2025, Wormhole announced a W 2.0 tokenomics upgrade introducing a 4% targeted base yield on W, a Wormhole Reserve mechanism, and a shift from annual token unlock cliffs to bi-weekly unlock schedules.","heading":"W Token Launch and Governance","sources":[{"url":"https://www.coindesk.com/business/2024/03/06/wormhole-to-release-617m-w-tokens-in-first-airdrop","name":"Wormhole to Airdrop 617M W Tokens — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.coindesk.com/business/2024/04/03/wormhole-debuts-at-3b-valuation-in-617m-token-airdrop","name":"Wormhole Debuts at $3B Valuation — CoinDesk","type":"news_article","credibility":1},{"url":"https://wormhole.com/blog/wormhole-w-tokenomics","name":"Wormhole W Tokenomics — Official","type":"official","credibility":1},{"url":"https://wormhole.com/blog/wormhole-announces-w-token-2-0-upgrade","name":"Wormhole announces W token 2.0 upgrade — Official Blog","type":"official","credibility":1}],"severity":"low"},{"content":"The Wormhole exploit occurred within a broader pattern of cross-chain bridge vulnerabilities that made 2022 the most destructive year for bridge hacks in DeFi history, with over $1.3 billion stolen across multiple protocols.\n\nThe Ronin Bridge (Axie Infinity) was hacked for approximately $625 million in March 2022 when attackers compromised private keys of five of nine validator nodes through a spear-phishing campaign. The Harmony Horizon Bridge was exploited for approximately $100 million in June 2022 through compromise of a 2-of-5 multisig. The Nomad Bridge lost approximately $190 million in August 2022 when a smart contract upgrade introduced a bug allowing any user to forge transfer proofs; roughly 80% of those losses were caused by copycat exploiters.\n\nSecurity researchers group bridge vulnerabilities into smart contract logic flaws (as in Wormhole and Nomad) and compromised private keys or validator credentials (as in Ronin and Harmony). Chainlink has identified seven distinct vulnerability categories for bridge protocols. CertiK and other security firms note that bridges are high-value targets because they hold large pools of locked assets on one chain while minting equivalent representations on another, amplifying systemic risk.\n\nThe Wormhole hack is also cited as context for later Solana exploits: the Drift Protocol exploit of April 2026, with losses of approximately $285 million, became the second-largest Solana ecosystem hack after Wormhole.","heading":"Cross-Chain Bridge Security Context","sources":[{"url":"https://bitcoin.tax/blog/cross-chain-bridge-hacks/","name":"5 Biggest Crypto Cross-Chain Bridge Hacks in 2022 — BitcoinTaxes","type":"research","credibility":2},{"url":"https://www.certik.com/resources/blog/GuBAYoHdhrS1mK9Nyfyto-cross-chain-vulnerabilities-and-bridge-exploits-in-2022","name":"Cross-Chain Vulnerabilities & Bridge Exploits in 2022 — CertiK","type":"research","credibility":2},{"url":"https://chain.link/education-hub/cross-chain-bridge-vulnerabilities","name":"7 Cross-Chain Bridge Vulnerabilities Explained — Chainlink","type":"research","credibility":2},{"url":"https://www.coindesk.com/layer2/2022/04/05/ronin-attack-shows-cross-chain-crypto-is-a-bridge-too-far","name":"Ronin Attack Shows Cross-Chain Crypto Is a 'Bridge' Too Far — CoinDesk","type":"news_article","credibility":1},{"url":"https://cointelegraph.com/news/report-half-of-all-defi-exploits-are-cross-bridge-hacks","name":"Report: Half of all DeFi exploits are cross-bridge hacks — CoinTelegraph","type":"news_article","credibility":1},{"url":"https://cloud.google.com/blog/topics/threat-intelligence/dissecting-nomad-bridge-hack","name":"Dissecting the Nomad Bridge Hack — Mandiant / Google Cloud","type":"research","credibility":1}],"severity":"high"}],"timeline":[{"date":"2021-08","event":"Jump Trading acquires Certus One, the original developer of Wormhole, bringing the protocol under Jump Crypto's stewardship.","source":"Fortune","source_url":"https://fortune.com/2022/02/04/320-million-crypto-hack-blockchain-ether-jump-trading-wormhole-refund-customer-losses/"},{"date":"2022-02","event":"Wormhole exploited for 120,000 wETH (reported at ~$320–326M) via the deprecated load_instruction_at function; attacker mints wETH on Solana without locking ETH collateral. Primary attacker Ethereum address: 0x629e7da20197a5429d30da36e77d06cdf796b71a.","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2022/02/02/blockchain-bridge-wormhole-suffers-possible-exploit-worth-over-250m"},{"date":"2022-02","event":"Wormhole team embeds a $10 million bounty offer in a transaction to the attacker's Ethereum wallet; the offer is not accepted.","source":""},{"date":"2022-02","event":"Jump Crypto deposits 120,000 ETH into the Wormhole bridge to replenish stolen funds, described as the largest DeFi bailout to date; Wormhole reopens.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2022/02/03/jump-trading-backstops-wormholes-320m-exploit-loss-sources"},{"date":"2023-01","event":"Stolen funds move after about a year of dormancy (January 14, 2023): exploiter activates Solana and Ethereum wallets within one hour of each other, bridging ~202,651 SOL and ~2.68M USDCet from Solana to Ethereum.","source":"Elliptic","source_url":"https://www.elliptic.co/blog/analysis/stolen-funds-from-the-wormhole-hack-on-the-move-after-laying-dormant-for-almost-a-year"},{"date":"2023-01","event":"Exploiter converts 95,630 ETH (~$155M) into stETH and wstETH via 1inch and OpenOcean and uses staked ETH as MakerDAO collateral to borrow DAI in a recursive strategy (dated January 23 on one page; the other places the start of the OpenOcean conversion on January 14).","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/wormhole-hacker-moves-155m-in-biggest-shift-of-stolen-funds-in-months"},{"date":"2023-02","event":"English High Court issues injunction (February 21, 2023) ordering Oasis to retrieve assets associated with the Wormhole exploit wallet.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2023/02/24/oasis-exploits-its-own-wallet-software-to-seize-crypto-stolen-in-wormhole-hack"},{"date":"2023-02","event":"Jump Crypto and Oasis execute the court-ordered counter-exploit, recovering approximately $140M net from the hacker's vaults (dated February 24 on one page and February 21 on the other).","source":"Blockworks","source_url":"https://blockworks.com/news/jump-crypto-wormhole-hack-recovery"},{"date":"2023-05","event":"Wormhole Labs incorporated as an independent entity, with a team of approximately 15, primarily from Jump Crypto.","source":"Blockworks","source_url":"https://blockworks.co/news/wormhole-jump-trading-separate"},{"date":"2023-07","event":"TechCrunch reports on Wormhole's post-hack security overhaul, including 29 third-party audits, bug bounty programs and Uniswap DAO bridge selection.","source":"TechCrunch","source_url":"https://techcrunch.com/2023/07/27/wormhole-new-security-320m-hack/"},{"date":"2023-11","event":"Bloomberg reports Jump Trading and Wormhole have parted ways; CEO Saeed Badreg and COO Anthony Ramirez leave Jump to run Wormhole independently.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2023/11/17/jump-trading-wormhole-part-ways-amid-tough-crypto-market-bloomberg"},{"date":"2023-11","event":"Wormhole raises $225 million at a $2.5 billion valuation from investors including Brevan Howard, Coinbase Ventures, Multicoin Capital and ParaFi.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2023/11/29/blockchain-messaging-platform-wormhole-raises-225m-at-25b-valuation"},{"date":"2023-12","event":"CertiK discovers a $5 million vulnerability in the Wormhole bridge on Aptos; it is patched within about three hours with no funds lost.","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/certik-discovered-5-million-security-flaw-wormhole-bridge-aptos"},{"date":"2024-03","event":"Wormhole announces first airdrop of 617 million W tokens (6.17% of 10B total supply) to past protocol users.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2024/03/06/wormhole-to-release-617m-w-tokens-in-first-airdrop"},{"date":"2024-04","event":"W token launches on Binance, Bybit, OKX and other exchanges at about $1.66, for a ~$3B fully diluted valuation.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2024/04/03/wormhole-debuts-at-3b-valuation-in-617m-token-airdrop"},{"date":"2024-06","event":"Fortune reports the CFTC has opened an investigation into Jump Crypto; President Kanav Kariya resigns shortly after. Unrelated to the Wormhole hack.","source":"Fortune","source_url":"https://fortune.com/crypto/2024/06/20/cftc-jump-crypto-behnam-kanav-kariya-sec/"},{"date":"2024-12","event":"SEC charges Jump Crypto's offshore entity Tai Mo Shan with misleading investors over Terra UST and unregistered LUNA dealings; Jump settles for approximately $123 million.","source":"CCN","source_url":"https://www.ccn.com/news/crypto/jump-crypto-cftc-scrutiny-series-high-profile-incidents/"}],"sources_used":[{"url":"https://www.halborn.com/blog/post/explained-the-wormhole-hack-february-2022","name":"Explained: The Wormhole Hack — Halborn","type":"research","archive_url":"http://web.archive.org/web/20260722230023/https://www.halborn.com/blog/post/explained-the-wormhole-hack-february-2022","credibility":2,"archive_timestamp":"2026-07-22T23:00:23+00:00"},{"url":"https://www.chainalysis.com/blog/wormhole-hack-february-2022/","name":"Wormhole Hack: Lessons From The Wormhole Exploit — Chainalysis","type":"research","archive_url":"http://web.archive.org/web/20260315141859/https://www.chainalysis.com/blog/wormhole-hack-february-2022/","credibility":2,"archive_timestamp":"2026-03-15T14:18:59+00:00"},{"url":"https://www.coindesk.com/tech/2022/02/02/blockchain-bridge-wormhole-suffers-possible-exploit-worth-over-250m","name":"Blockchain Bridge Wormhole Suffers Possible Exploit Worth Over $326M — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20251119221109/https://www.coindesk.com/tech/2022/02/02/blockchain-bridge-wormhole-suffers-possible-exploit-worth-over-250m","credibility":1,"archive_timestamp":"2025-11-19T22:11:09+00:00"},{"url":"https://www.cnbc.com/2022/02/02/320-million-stolen-from-wormhole-bridge-linking-solana-and-ethereum.html","name":"$320 million stolen from Wormhole — CNBC","type":"news_article","archive_url":"http://web.archive.org/web/20260426134217/https://www.cnbc.com/2022/02/02/320-million-stolen-from-wormhole-bridge-linking-solana-and-ethereum.html","credibility":1,"archive_timestamp":"2026-04-26T13:42:17+00:00"},{"url":"https://www.coindesk.com/business/2022/02/03/jump-trading-backstops-wormholes-320m-exploit-loss-sources","name":"Jump Trading Backstops Wormhole's $320M Exploit Loss — CoinDesk","type":"news_article","archive_url":"https://web.archive.org/web/20260725052916/https://www.coindesk.com/business/2022/02/03/jump-trading-backstops-wormholes-320m-exploit-loss-sources","credibility":1,"archive_timestamp":"2026-07-25T05:29:16+00:00"},{"url":"https://cointelegraph.com/news/jump-crypto-replenishes-funds-from-320m-wormhole-hack-in-largest-ever-defi-bailout","name":"Jump Crypto replenishes funds — CoinTelegraph","type":"news_article","archive_url":"http://web.archive.org/web/20250802014016/https://cointelegraph.com/news/jump-crypto-replenishes-funds-from-320m-wormhole-hack-in-largest-ever-defi-bailout","credibility":1,"archive_timestamp":"2025-08-02T01:40:16+00:00"},{"url":"https://www.bloomberg.com/news/articles/2022-02-03/jump-trading-seen-as-replenishing-stolen-amount-in-wormhole-hack","name":"Jump Crypto Replenishes $320 Million — Bloomberg","type":"news_article","archive_url":"http://web.archive.org/web/20250912025723/https://www.bloomberg.com/news/articles/2022-02-03/jump-trading-seen-as-replenishing-stolen-amount-in-wormhole-hack","credibility":1,"archive_timestamp":"2025-09-12T02:57:23+00:00"},{"url":"https://fortune.com/2022/02/04/320-million-crypto-hack-blockchain-ether-jump-trading-wormhole-refund-customer-losses/","name":"Wormhole hack — Fortune","type":"news_article","archive_url":"http://web.archive.org/web/20260305000831/https://fortune.com/2022/02/04/320-million-crypto-hack-blockchain-ether-jump-trading-wormhole-refund-customer-losses/","credibility":1,"archive_timestamp":"2026-03-05T00:08:31+00:00"},{"url":"https://www.elliptic.co/blog/analysis/stolen-funds-from-the-wormhole-hack-on-the-move-after-laying-dormant-for-almost-a-year","name":"Stolen funds from Wormhole hack on the move — Elliptic","type":"research","archive_url":"http://web.archive.org/web/20260519164238/https://www.elliptic.co/blog/analysis/stolen-funds-from-the-wormhole-hack-on-the-move-after-laying-dormant-for-almost-a-year","credibility":2,"archive_timestamp":"2026-05-19T16:42:38+00:00"},{"url":"https://cointelegraph.com/news/wormhole-hacker-moves-155m-in-biggest-shift-of-stolen-funds-in-months","name":"Wormhole hacker moves $155M — CoinTelegraph","type":"news_article","archive_url":"http://web.archive.org/web/20260720153548/https://cointelegraph.com/news/wormhole-hacker-moves-155m-in-biggest-shift-of-stolen-funds-in-months","credibility":1,"archive_timestamp":"2026-07-20T15:35:48+00:00"},{"url":"https://www.coindesk.com/business/2023/02/24/oasis-exploits-its-own-wallet-software-to-seize-crypto-stolen-in-wormhole-hack","name":"Oasis Exploits Its Own Wallet Software — CoinDesk","type":"news_article","archive_url":"https://web.archive.org/web/20260726071055/https://www.coindesk.com/business/2023/02/24/oasis-exploits-its-own-wallet-software-to-seize-crypto-stolen-in-wormhole-hack","credibility":1,"archive_timestamp":"2026-07-26T07:10:55+00:00"},{"url":"https://blockworks.com/news/jump-crypto-wormhole-hack-recovery","name":"Jump Crypto Counter-Exploited Wormhole Hacker for $140M — Blockworks","type":"news_article","archive_url":"http://web.archive.org/web/20260625135631/https://blockworks.com/news/jump-crypto-wormhole-hack-recovery","credibility":2,"archive_timestamp":"2026-06-25T13:56:31+00:00"},{"url":"https://www.coindesk.com/business/2023/11/17/jump-trading-wormhole-part-ways-amid-tough-crypto-market-bloomberg","name":"Jump Trading, Wormhole Part Ways — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260725054518/https://www.coindesk.com/business/2023/11/17/jump-trading-wormhole-part-ways-amid-tough-crypto-market-bloomberg","credibility":1,"archive_timestamp":"2026-07-25T05:45:18+00:00"},{"url":"https://fortune.com/crypto/2023/11/29/wormhole-raises-225-million-2-5-billion-valuation-jump-crypto-split/","name":"Wormhole raises $225 million at $2.5 billion valuation — Fortune","type":"news_article","archive_url":"http://web.archive.org/web/20260223181533/https://fortune.com/crypto/2023/11/29/wormhole-raises-225-million-2-5-billion-valuation-jump-crypto-split/","credibility":1,"archive_timestamp":"2026-02-23T18:15:33+00:00"},{"url":"https://www.coindesk.com/business/2023/11/29/blockchain-messaging-platform-wormhole-raises-225m-at-25b-valuation","name":"Wormhole raises $225M at $2.5B valuation — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20250429183849/https://www.coindesk.com/business/2023/11/29/blockchain-messaging-platform-wormhole-raises-225m-at-25b-valuation","credibility":1,"archive_timestamp":"2025-04-29T18:38:49+00:00"},{"url":"https://www.bloomberg.com/news/articles/2023-11-29/wormhole-jump-incubated-crypto-project-raises-at-2-5-billion-valuation","name":"Brevan Howard Backs Wormhole — Bloomberg","type":"news_article","archive_url":"http://web.archive.org/web/20231129183531/https://www.bloomberg.com/news/articles/2023-11-29/wormhole-jump-incubated-crypto-project-raises-at-2-5-billion-valuation","credibility":1,"archive_timestamp":"2023-11-29T18:35:31+00:00"},{"url":"https://www.coindesk.com/business/2024/03/06/wormhole-to-release-617m-w-tokens-in-first-airdrop","name":"Wormhole to Airdrop 617M W Tokens — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260725054429/https://www.coindesk.com/business/2024/03/06/wormhole-to-release-617m-w-tokens-in-first-airdrop","credibility":1,"archive_timestamp":"2026-07-25T05:44:29+00:00"},{"url":"https://www.coindesk.com/business/2024/04/03/wormhole-debuts-at-3b-valuation-in-617m-token-airdrop","name":"Wormhole Debuts at $3B Valuation — CoinDesk","type":"news_article","archive_url":"https://web.archive.org/web/20260725094816/https://www.coindesk.com/business/2024/04/03/wormhole-debuts-at-3b-valuation-in-617m-token-airdrop","credibility":1,"archive_timestamp":"2026-07-25T09:48:16+00:00"},{"url":"https://fortune.com/crypto/2024/06/20/cftc-jump-crypto-behnam-kanav-kariya-sec/","name":"CFTC probing Jump Crypto — Fortune","type":"news_article","archive_url":"http://web.archive.org/web/20260202000607/https://fortune.com/crypto/2024/06/20/cftc-jump-crypto-behnam-kanav-kariya-sec/","credibility":1,"archive_timestamp":"2026-02-02T00:06:07+00:00"},{"url":"https://etherscan.io/address/0x629e7da20197a5429d30da36e77d06cdf796b71a","name":"Wormhole Network Exploiter — Etherscan","type":"on_chain","archive_url":"http://web.archive.org/web/20260713051122/https://etherscan.io/address/0x629e7da20197a5429d30da36e77d06cdf796b71a","credibility":1,"archive_timestamp":"2026-07-13T05:11:22+00:00"},{"url":"https://blockworks.co/news/wormhole-jump-trading-separate","name":"Wormhole execs depart Jump Trading — Blockworks","type":"news_article","archive_url":"http://web.archive.org/web/20260222040442/https://blockworks.co/news/wormhole-jump-trading-separate","credibility":2,"archive_timestamp":"2026-02-22T04:04:42+00:00"},{"url":"https://wormhole.com/platform/security","name":"Wormhole Security Page","type":"official","archive_url":"http://web.archive.org/web/20260514102838/https://wormhole.com/platform/security","credibility":1,"archive_timestamp":"2026-05-14T10:28:38+00:00"},{"url":"https://wormhole.com/blog/wormhole-w-tokenomics","name":"Wormhole W Tokenomics — Official","type":"official","archive_url":"http://web.archive.org/web/20260307185817/https://wormhole.com/blog/wormhole-w-tokenomics","credibility":1,"archive_timestamp":"2026-03-07T18:58:17+00:00"},{"url":"https://www.trmlabs.com/resources/blog/solana-wormhole-compromise-120k-stolen-eth","name":"Solana Wormhole Compromise — TRM Labs","type":"research","archive_url":"http://web.archive.org/web/20260509175537/https://www.trmlabs.com/resources/blog/solana-wormhole-compromise-120k-stolen-eth","credibility":2,"archive_timestamp":"2026-05-09T17:55:37+00:00"},{"url":"https://bitcoin.tax/blog/cross-chain-bridge-hacks/","name":"5 Biggest Crypto Cross-Chain Bridge Hacks in 2022 — BitcoinTaxes","type":"research","archive_url":"http://web.archive.org/web/20261003051828/https://bitcoin.tax/blog/cross-chain-bridge-hacks/","credibility":2,"archive_timestamp":"2026-10-03T05:18:28+00:00"},{"url":"https://techcrunch.com/2023/07/27/wormhole-new-security-320m-hack/","name":"Wormhole digs out of its hole — TechCrunch","type":"news_article","archive_url":"https://web.archive.org/web/20260725051232/https://techcrunch.com/2023/07/27/wormhole-new-security-320m-hack/","credibility":1,"archive_timestamp":"2026-07-25T05:12:32+00:00"},{"url":"https://certik.medium.com/wormhole-bridge-exploit-analysis-5068d79cbb71","name":"Wormhole bridge exploit analysis — CertiK","type":"research","archive_url":"http://web.archive.org/web/20251116171211/https://certik.medium.com/wormhole-bridge-exploit-analysis-5068d79cbb71","credibility":2,"archive_timestamp":"2025-11-16T17:12:11+00:00"},{"url":"https://kudelskisecurity.com/research/quick-analysis-of-the-wormhole-attack","name":"Quick Analysis of the Wormhole Attack — Kudelski Security","type":"research","archive_url":"http://web.archive.org/web/20260519155247/https://kudelskisecurity.com/research/quick-analysis-of-the-wormhole-attack","credibility":2,"archive_timestamp":"2026-05-19T15:52:47+00:00"},{"url":"https://www.bloomberg.com/news/articles/2022-02-02/blockchain-bridge-wormhole-hit-with-potential-315-million-hack","name":"Blockchain Bridge Wormhole Hit With Potential $315 Million Hack — Bloomberg","type":"other","archive_url":"http://web.archive.org/web/20240215165509/https://www.bloomberg.com/news/articles/2022-02-02/blockchain-bridge-wormhole-hit-with-potential-315-million-hack","credibility":3,"archive_timestamp":"2024-02-15T16:55:09+00:00"},{"url":"https://immunebytes.com/blog/wormhole-bridge-hack-feb-2-2022-detailed-hack-analysis/","name":"Wormhole Bridge Hack (Feb 2, 2022) Detailed Hack Analysis — ImmuneBytes","type":"other","archive_url":"http://web.archive.org/web/20260410154351/https://immunebytes.com/blog/wormhole-bridge-hack-feb-2-2022-detailed-hack-analysis/","credibility":3,"archive_timestamp":"2026-04-10T15:43:51+00:00"},{"url":"https://www.certik.com/resources/blog/wormhole-bridge-exploit-incident-analysis","name":"Wormhole Bridge Exploit Incident Analysis — CertiK","type":"other","archive_url":"http://web.archive.org/web/20260220100935/https://www.certik.com/resources/blog/wormhole-bridge-exploit-incident-analysis","credibility":3,"archive_timestamp":"2026-02-20T10:09:35+00:00"},{"url":"https://decrypt.co/92709/jump-crypto-wormhole-defi","name":"Jump Crypto and Wormhole — Decrypt","type":"other","archive_url":"http://web.archive.org/web/20260609211735/https://decrypt.co/92709/jump-crypto-wormhole-defi","credibility":3,"archive_timestamp":"2026-06-09T21:17:35+00:00"},{"url":"https://www.cryptotimes.io/2023/02/27/wormhole-hacker-suffers-counter-exploit-from-jump-crypto-and-oasis-app/","name":"Wormhole hacker suffers counter-exploit from Jump Crypto and Oasis.app — The Crypto Times","type":"other","archive_url":"https://web.archive.org/web/20260901101349/https://www.cryptotimes.io/2023/02/27/wormhole-hacker-suffers-counter-exploit-from-jump-crypto-and-oasis-app/","credibility":3,"archive_timestamp":"2026-09-01T10:13:49+00:00"},{"url":"https://www.citationneeded.news/oasis-defi-centralization/","name":"Oasis and DeFi centralization — Citation Needed","type":"other","archive_url":"http://web.archive.org/web/20260518063709/https://www.citationneeded.news/oasis-defi-centralization/","credibility":3,"archive_timestamp":"2026-05-18T06:37:09+00:00"},{"url":"https://cointelegraph.com/news/certik-discovered-5-million-security-flaw-wormhole-bridge-aptos","name":"CertiK discovered $5 million security flaw in Wormhole bridge on Aptos — CoinTelegraph","type":"other","archive_url":"https://web.archive.org/web/20260830210106/https://cointelegraph.com/news/certik-discovered-5-million-security-flaw-wormhole-bridge-aptos","credibility":3,"archive_timestamp":"2026-08-30T21:01:06+00:00"},{"url":"https://beincrypto.com/security-flaw-aptos-wormhole-bridge/","name":"Security flaw in Aptos Wormhole bridge — BeInCrypto","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://wormhole.foundation/blog/report-on-certiks-aptos-related-bug-bounty-2","name":"Report on CertiK's Aptos-related bug bounty — Wormhole Foundation","type":"other","archive_url":"https://web.archive.org/web/20260830173413/https://wormhole.foundation/blog/report-on-certiks-aptos-related-bug-bounty-2","credibility":3,"archive_timestamp":"2026-08-30T17:34:13+00:00"},{"url":"https://immunefi.com/bug-bounty/wormhole/information/","name":"Wormhole Bug Bounty — Immunefi","type":"other","archive_url":"http://web.archive.org/web/20260805030728/https://immunefi.com/bug-bounty/wormhole/information/","credibility":3,"archive_timestamp":"2026-08-05T03:07:28+00:00"},{"url":"https://www.cbsnews.com/news/wormhole-ether-cryptocurrency-320-million-hack/","name":"Wormhole ether cryptocurrency $320 million hack — CBS News","type":"other","archive_url":"http://web.archive.org/web/20260317160615/https://www.cbsnews.com/news/wormhole-ether-cryptocurrency-320-million-hack/","credibility":3,"archive_timestamp":"2026-03-17T16:06:15+00:00"},{"url":"https://www.merklescience.com/blog/hack-track-analysis-of-wormhole-token-bridge-exploit","name":"Hack Track: Analysis of Wormhole Token Bridge Exploit — Merkle Science","type":"other","archive_url":"http://web.archive.org/web/20260511063936/https://www.merklescience.com/blog/hack-track-analysis-of-wormhole-token-bridge-exploit","credibility":3,"archive_timestamp":"2026-05-11T06:39:36+00:00"},{"url":"https://eco.com/support/en/articles/13052583-understanding-wormhole-the-cross-chain-protocol-connecting-blockchains","name":"Understanding Wormhole: The Cross-Chain Protocol Connecting Blockchains","type":"other","archive_url":"http://web.archive.org/web/20261008085326/https://eco.com/support/en/articles/13052583-understanding-wormhole-the-cross-chain-protocol-connecting-blockchains","credibility":2,"archive_timestamp":"2026-10-08T08:53:26+00:00"},{"url":"https://financefeeds.com/wormhole-bridges-how-cross-chain-transfers-work/","name":"Wormhole Bridges: How Cross-Chain Transfers Work","type":"other","archive_url":"http://web.archive.org/web/20261021124134/https://financefeeds.com/wormhole-bridges-how-cross-chain-transfers-work/","credibility":2,"archive_timestamp":"2026-10-21T12:41:34+00:00"},{"url":"https://wormhole.com/products/native-token-transfers","name":"Wormhole Native Token Transfers Product Page","type":"official","archive_url":"http://web.archive.org/web/20261017014139/https://wormhole.com/products/native-token-transfers","credibility":1,"archive_timestamp":"2026-10-17T01:41:39+00:00"},{"url":"https://crypto.news/wormhole-attackers-transfer-2-9m-usdc-to-a-new-wallet-address-months-after-hack/","name":"Wormhole attackers transfer $2.9M USDC to new wallet — Crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20261003050317/https://crypto.news/wormhole-attackers-transfer-2-9m-usdc-to-a-new-wallet-address-months-after-hack/","credibility":2,"archive_timestamp":"2026-10-03T05:03:17+00:00"},{"url":"https://www.ccn.com/news/crypto/jump-crypto-cftc-scrutiny-series-high-profile-incidents/","name":"Jump Crypto Under CFTC Scrutiny — CCN","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.ccn.com/news/crypto/jump-crypto-president-resigns-amid-cftc-investigation/","name":"Jump Crypto President Resigns Amid CFTC Investigation — CCN","type":"news_article","archive_url":null,"credibility":2,"archive_error":"forbiddenaccess","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://wormhole.com/blog/wormhole-integrates-google-cloud-into-guardian-security-system","name":"Wormhole Integrates Google Cloud Into Guardian Security System","type":"official","archive_url":"http://web.archive.org/web/20261003050346/https://wormhole.com/blog/wormhole-integrates-google-cloud-into-guardian-security-system","credibility":1,"archive_timestamp":"2026-10-03T05:03:46+00:00"},{"url":"https://wormhole.com/docs/protocol/infrastructure/guardians/","name":"Guardians — Wormhole Docs","type":"official","archive_url":"http://web.archive.org/web/20261012223933/https://wormhole.com/docs/protocol/infrastructure/guardians/","credibility":1,"archive_timestamp":"2026-10-12T22:39:33+00:00"},{"url":"https://wormhole.com/blog/wormhole-announces-w-token-2-0-upgrade","name":"Wormhole announces W token 2.0 upgrade — Official Blog","type":"official","archive_url":"http://web.archive.org/web/20261013070050/https://wormhole.com/blog/wormhole-announces-w-token-2-0-upgrade","credibility":1,"archive_timestamp":"2026-10-13T07:00:50+00:00"},{"url":"https://www.certik.com/resources/blog/GuBAYoHdhrS1mK9Nyfyto-cross-chain-vulnerabilities-and-bridge-exploits-in-2022","name":"Cross-Chain Vulnerabilities & Bridge Exploits in 2022 — CertiK","type":"research","archive_url":"http://web.archive.org/web/20250120154632/https://www.certik.com/resources/blog/GuBAYoHdhrS1mK9Nyfyto-cross-chain-vulnerabilities-and-bridge-exploits-in-2022","credibility":2,"archive_timestamp":"2025-01-20T15:46:32+00:00"},{"url":"https://chain.link/education-hub/cross-chain-bridge-vulnerabilities","name":"7 Cross-Chain Bridge Vulnerabilities Explained — Chainlink","type":"research","archive_url":"http://web.archive.org/web/20261004222453/https://chain.link/education-hub/cross-chain-bridge-vulnerabilities","credibility":2,"archive_timestamp":"2026-10-04T22:24:53+00:00"},{"url":"https://www.coindesk.com/layer2/2022/04/05/ronin-attack-shows-cross-chain-crypto-is-a-bridge-too-far","name":"Ronin Attack Shows Cross-Chain Crypto Is a 'Bridge' Too Far — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20261003052355/https://www.coindesk.com/layer2/2022/04/05/ronin-attack-shows-cross-chain-crypto-is-a-bridge-too-far","credibility":1,"archive_timestamp":"2026-10-03T05:23:55+00:00"},{"url":"https://cointelegraph.com/news/report-half-of-all-defi-exploits-are-cross-bridge-hacks","name":"Report: Half of all DeFi exploits are cross-bridge hacks — CoinTelegraph","type":"news_article","archive_url":"http://web.archive.org/web/20261003085522/https://cointelegraph.com/news/report-half-of-all-defi-exploits-are-cross-bridge-hacks","credibility":1,"archive_timestamp":"2026-10-03T08:55:22+00:00"},{"url":"https://cloud.google.com/blog/topics/threat-intelligence/dissecting-nomad-bridge-hack","name":"Dissecting the Nomad Bridge Hack — Mandiant / Google Cloud","type":"research","archive_url":"http://web.archive.org/web/20261003052029/https://cloud.google.com/blog/topics/threat-intelligence/dissecting-nomad-bridge-hack","credibility":1,"archive_timestamp":"2026-10-03T05:20:29+00:00"}],"source_tags":[],"addresses":[{"chain":"solana","label":"Wormhole Token (W)","address":"85VBFQZC9TZkfaptBWjvUw7YbZjy52A6mjtPGjstQAmQ"}],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-05-10T06:08:43.752933+00:00","updated_at":"2026-10-31T00:50:26.039184+00:00"},"source_quality":{"total":54,"tier1":1,"tier2":22,"tier3":0,"unrated":31},"follower_count":null,"content_updated_at":"2026-10-27T18:31:52.472Z","last_fact_checked_at":"2026-10-27T18:31:52.120Z","fact_check_next_allowed_at":null,"update_next_allowed_at":null}