Skip to main content
AVOID.NET

Wormhole Bridge

avoid.net/wormhole-bridge→63/100·88% conf.
[✓ FACT-CHECKED]· reviewed once · last review 14 Jun 2026

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·2Tc4EE…TzYP
last updated 2026-08-29

Summary

Wormhole Bridge is a cross-chain messaging and token bridge protocol originally developed by Certus One, later owned by Jump Crypto, enabling asset transfers between Solana, Ethereum, and other blockchains. On February 2, 2022, an attacker exploited a signature verification flaw in the Solana-side smart contract to fraudulently mint 120,000 wrapped ETH (wETH) worth approximately $320–326 million without posting collateral, making it the second-largest DeFi exploit in history at the time. Jump Crypto replenished the stolen ETH within 24 hours to prevent ecosystem collapse, and a court-authorized counter-exploit in February 2023 recovered approximately $140 million of the remaining stolen funds.

Connected Entities

8 entities · 59 linked investigations
Organizations
□Ethereum90□Jump Trading□Wormhole□Solana□Aptos□Wormhole Bridge
Protocols
Relationships
  • Jump Trading→mentioned with→Ethereum(60%)
  • Jump Trading→mentioned with→Wormhole(70%)
  • Jump Trading→mentioned with→Solana(80%)
  • Aptos→mentioned with→Ethereum(80%)
  • Aptos→mentioned with→Solana(65%)
  • Uniswap→mentioned with→Ethereum(80%)
  • Lido Finance→mentioned with→Ethereum(80%)
  • Lido Finance→mentioned with→Wormhole(65%)
  • Jump Trading→mentioned with→Wormhole Bridge(80%)
  • Wormhole→mentioned with→Wormhole Bridge(80%)
  • + 12 more
Have evidence about Wormhole Bridge?

Timeline(9 events)

2 February 2022

Wormhole Bridge exploited; attacker mints 120,000 wETH (~$320-326M) on Solana without collateral using a signature verification bypass in the Solana smart contract.

2 February 2022

Wormhole team embeds a $10 million bounty offer in a transaction to the attacker's Ethereum wallet; the offer is not accepted.

3 February 2022

Jump Crypto deposits 120,000 ETH to replenish the bridge and make users whole, preventing cascading insolvencies across Solana DeFi.

14 January 2023

Attacker's Ethereum and Solana wallets activate simultaneously after nearly a year of dormancy; attacker begins converting stolen ETH into staked ETH derivatives via OpenOcean.

23 January 2023

Attacker moves approximately $155 million in ETH to decentralized exchanges, converting to stETH and wstETH and using them as collateral to borrow DAI on MakerDAO.

21 February 2023

Oasis.app receives an order from the High Court of England and Wales to retrieve assets associated with the Wormhole exploit wallet.

21 February 2023

Jump Crypto and Oasis execute a court-authorized counter-exploit against the attacker's Oasis vaults, recovering approximately $140 million net in stolen assets.

27 July 2023

TechCrunch reports on Wormhole's post-hack security overhaul including 29 third-party audits, two $2.5M bug bounty programs, and Uniswap DAO bridge selection.

5 December 2023

CertiK discovers a $5 million vulnerability in the Wormhole bridge on Aptos and discloses it to the Wormhole team; the flaw is patched within approximately three hours with no funds lost.

Provenance & Audit Trail

Decision Log

  • #3review approve+21Recorded on Solana ✓6/14/2026, 11:15:59 PM
    slot 426514489 · hash 88AYwxnWxi3gbdWGrLyjauYKWyaQCPigpQC9c6Da5apN
  • #2reviewRecorded on Solana ✓6/14/2026, 11:15:59 PM
    slot 426514485 · hash 4Peap6srZtcTCMHMZnmRN28tzp1zUTwoLA7qVxbZUbMQ
  • #1publishRecorded on Solana ✓5/30/2026, 6:25:51 PM
    slot 423210500 · hash AMZMXKBbkra2PuiA9V6JHM3mAtoxvNRocnHqCHTXNfWQ

This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 22 of 23 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/30/2026, 6:25:49 PM

last updated: 8/29/2026, 1:33:50 AM

5 views

avoid.net — verified advice for a post-truth world