Meter Passport Bridge
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 53. Problems weighed by who is responsible: incidents the subject suffered −20, problems around the subject, caused by others −1.6; the penalty for incidents it suffered is capped at 20. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -20 |
| Problems around it, caused by others | -1.6 |
| Sum | 43 |
- The penalty for incidents it suffered is capped at 20 points.
Score: 53/100 (kept between 0 and 100)
How scoring works →Summary
Meter Passport is the cross-chain bridge product of Meter Protocol, a layer-1 blockchain infrastructure project. On February 5, 2022, the bridge was exploited for approximately $4.4 million due to a flawed trust assumption in the ERC20 handler contract's treatment of wrapped native tokens (WETH and BNB). Cascading effects from the exploit caused an additional ~$2.1 million in losses to the Hundred Finance protocol on Moonriver, bringing total ecosystem damage to roughly $6.5 million.
Connected Entities
10 entities · 60 linked investigations- Hundred Finance→mentioned with→Ethereum(70%)
- Meter Passport Bridge→mentioned with→Binance(60%)
- Meter Passport Bridge→mentioned with→SushiSwap(65%)
- Meter Passport Bridge→mentioned with→Wormhole(80%)
- Meter Passport Bridge→mentioned with→Ethereum(70%)
- Meter Passport Bridge→mentioned with→Meter(70%)
- Qubit Finance→mentioned with→Ethereum(70%)
- Qubit Finance→mentioned with→Binance(80%)
- Binance→mentioned with→Ethereum(65%)
- SushiSwap→mentioned with→Ethereum(60%)
- + 17 more
1 submission awaiting moderator review.
Timeline(15 events)
28 January 2022
Qubit Finance bridge exploited for $80 million, using a similar deposit function validation flaw pattern.
Crowdfund Insider2 February 2022
Wormhole bridge exploited for $302 million, the largest bridge hack to date at the time.
Crowdfund Insider5 February 2022
Meter Passport bridge exploit begins at approximately 2:30 PM UTC. Attacker calls deposit() directly on ERC20 Handler contracts with wrapped native tokens, bypassing collateral checks.
Meter.io Post Mortem (Official)5 February 2022
Attacker drains 3,632.8 BNB from BSC ERC20 handler and 422.5 ETH from Ethereum handler. Mints 30,000 BNB.bsc on Moonriver and 1,500 WETH.eth on Meter network.
Meter.io Post Mortem (Official)5 February 2022
Meter team pauses bridge operations at approximately 4:00 PM UTC, roughly 90 minutes after the attack begins.
Meter.io Post Mortem (Official)5 February 2022
Vulnerability in ERC20 Handler identified at approximately 4:30 PM UTC. Loss figures calculated and released by 7:30 PM UTC.
Meter.io Post Mortem (Official)5 February 2022
Attacker sells stolen BNB on SushiSwap on Moonriver, causing BNB price on Moonriver to crash approximately 77%. Opportunists buy cheap BNB and borrow against it on Hundred Finance.
CoinTelegraph6 February 2022
Meter team publicly commits to reimbursing community and Hundred Finance, setting aside $4.4 million in MTRG tokens to cover initial losses.
BeinCrypto6 February 2022
Moonriver network notified at approximately 8:30 PM UTC (Feb 5) of the cascading secondary impact.
Meter.io Post Mortem (Official)10 March 2022
Deadline for affected users to submit tokens for the PASS compensation airdrop.
Meter.io Post Mortem (Official)12 March 2022
Governance proposal for PASS token compensation structure passes community vote.
Meter.io Post Mortem (Official)15 March 2022
PASS token airdrop begins for affected Meter Passport users.
Meter.io Post Mortem (Official)3 April 2022
PASS tokens fully distributed to all eligible affected users. Total compensation: approximately $4.25 million USD denominated in PASS tokens.
Meter.io Post Mortem (Official)April 2022
Meter Passport v1.5 upgrade announced, based on ChainSafe v2.x bridge contracts. HAECHI AUDIT engaged for security review.
Meter Docs2022
HAECHI AUDIT completes audit of Meter Passport v1.5, identifying and resolving 8 findings (3 critical, 2 major, 3 minor) before deployment.
Meter Medium: v1.5 HAECHI AuditDecision Log
- slot 455368024 · hash BBTgSLMmcDTiczyWFMsz9FfEfmqfAFcpo2GVvpbLC13N
- slot 423324592 · hash 9joLnwWjdFzHKXn5yinpEXyGFw7NrucacopUekUEvvUP
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 10 of 12 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/31/2026, 6:59:43 AM
last updated: 10/10/2026, 6:48:00 PM
3 viewsavoid.net — verified advice for a post-truth world