Wormhole Bridge
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·2Tc4EE…TzYPSummary
Wormhole Bridge is a cross-chain messaging and token bridge protocol originally developed by Certus One, later owned by Jump Crypto, enabling asset transfers between Solana, Ethereum, and other blockchains. On February 2, 2022, an attacker exploited a signature verification flaw in the Solana-side smart contract to fraudulently mint 120,000 wrapped ETH (wETH) worth approximately $320–326 million without posting collateral, making it the second-largest DeFi exploit in history at the time. Jump Crypto replenished the stolen ETH within 24 hours to prevent ecosystem collapse, and a court-authorized counter-exploit in February 2023 recovered approximately $140 million of the remaining stolen funds.
Connected Entities
1 entitiesTimeline(9 events)
2 February 2022
Wormhole Bridge exploited; attacker mints 120,000 wETH (~$320-326M) on Solana without collateral using a signature verification bypass in the Solana smart contract.
2 February 2022
Wormhole team embeds a $10 million bounty offer in a transaction to the attacker's Ethereum wallet; the offer is not accepted.
3 February 2022
Jump Crypto deposits 120,000 ETH to replenish the bridge and make users whole, preventing cascading insolvencies across Solana DeFi.
14 January 2023
Attacker's Ethereum and Solana wallets activate simultaneously after nearly a year of dormancy; attacker begins converting stolen ETH into staked ETH derivatives via OpenOcean.
23 January 2023
Attacker moves approximately $155 million in ETH to decentralized exchanges, converting to stETH and wstETH and using them as collateral to borrow DAI on MakerDAO.
21 February 2023
Oasis.app receives an order from the High Court of England and Wales to retrieve assets associated with the Wormhole exploit wallet.
21 February 2023
Jump Crypto and Oasis execute a court-authorized counter-exploit against the attacker's Oasis vaults, recovering approximately $140 million net in stolen assets.
27 July 2023
TechCrunch reports on Wormhole's post-hack security overhaul including 29 third-party audits, two $2.5M bug bounty programs, and Uniswap DAO bridge selection.
5 December 2023
CertiK discovers a $5 million vulnerability in the Wormhole bridge on Aptos and discloses it to the Wormhole team; the flaw is patched within approximately three hours with no funds lost.
Decision Log
- hash: 88AYwxnWxi3gbdWGrLyjauYKWyaQCPigpQC9c6Da5apN
- hash: 4Peap6srZtcTCMHMZnmRN28tzp1zUTwoLA7qVxbZUbMQ
- hash: AMZMXKBbkra2PuiA9V6JHM3mAtoxvNRocnHqCHTXNfWQ
This investigation is cryptographically anchored to the Solana blockchain (3 events). 0 of 23 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/30/2026, 6:25:49 PM
last updated: 8/29/2026, 1:33:48 AM
avoid.net — verified advice for a post-truth world