← Wormholereviewed 2026-09-30 · 20 claims checked
Fact-check findings
What an automated fact-checker found when it re-read Wormhole against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
disputed
2 claimsThe reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.
- #14[disputed][awaiting moderator]in section: W Token Launch and Governance
“W debuted at approximately $1.66 and the total protocol valuation at launch was approximately $3 billion fully diluted.”
reviewerW debuted at approximately $1.66 and the total protocol valuation at launch was approximately $3 billion fully diluted.The cited CoinDesk article's own headline figure of '$3B' refers to circulating market capitalization, not the fully diluted valuation; the article explicitly gives FDV as $16.5 billion. The page conflates the two.Proposed correction (not yet applied)W debuted at approximately $1.66, giving a circulating market capitalization of roughly $3 billion; the fully diluted valuation at launch was approximately $16.5 billion. - #15[disputed][awaiting moderator]in the timeline
“Wormhole debuts at approximately $3B fully diluted valuation with W priced near $1.66.”
reviewerW token launches on major exchanges; Wormhole debuts at approximately $3B fully diluted valuation with W priced near $1.66.Same underlying error as the sections[7] occurrence — the timeline event mislabels circulating market cap as fully diluted valuation.Proposed correction (not yet applied)Wormhole debuts at approximately $2.98 billion in circulating market capitalization (fully diluted valuation approximately $16.5 billion), with W priced near $1.66.
unverifiable
1 claimNo source the reviewer could reach confirms or contradicts the claim.
- #12[unverifiable][awaiting moderator]in section: Security Improvements and Post-Hack Rebuilding
“The protocol also operates one of the larger bug bounty programs in the DeFi space through Immunefi, with a maximum payout of $5 million.”
reviewerWormhole's Immunefi bug bounty program has a maximum payout of $5 million.Reporting on this program's current cap is inconsistent between sources consulted; could not confirm or refute the $5 million figure with confidence. A correction is not proposed because no verified figure could be established.
partially supported
2 claimsThe cited evidence supports part of the claim but not all of it.
- #6[partially supported][awaiting moderator]in section: Jump Crypto Bailout and Fund Recovery Attempts
“The exploiter filed a counter-claim in the proceedings, and further legal activity was reported in New York courts in 2024, where a judgment was obtained declaring the stolen assets victims had a proprietary right and interest in the stolen funds.”
reviewerIn March 2024, a New York court issued a judgment declaring that 'victims' of the Wormhole hack hold a proprietary interest in the stolen assets.The underlying fact of a March 2024 NY proprietary-interest judgment is real, but the page attributes it to unnamed 'victims' rather than to Tai Mo Shan Limited (TMSL), the specific Jump Crypto entity that obtained the default judgment after replenishing user losses. - #7[partially supported][awaiting moderator]in section: Regulatory and Legal Aftermath
“Separately, in March 2024, a New York court issued a judgment declaring that victims of the Wormhole hack hold a proprietary interest in the stolen assets, a ruling that could support future recovery efforts.”
reviewerSeparately, a March 2024 New York court judgment declared that 'victims of the Wormhole hack' hold a proprietary interest in the stolen assets.Same defect as sections[2]; the page repeats the imprecise attribution to 'victims' rather than naming TMSL as the judgment-holder.
confirmed
15 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: February 2022 Exploit — $326 Million Signature Verification Bypass
“On February 2, 2022, an unknown attacker exploited a critical vulnerability in Wormhole's Solana smart contracts, minting 120,000 wrapped ETH (wETH) on Solana without depositing any corresponding ETH collateral on Ethereum. At prevailing prices, the stolen assets were valued at approximately $326 million, making it the largest hack in Solana ecosystem history at the time.”
reviewerOn February 2, 2022, an attacker exploited Wormhole's Solana contracts to mint 120,000 wETH worth ~$326M without collateral, the largest Solana ecosystem hack at the time.Consistent with extensive contemporaneous and retrospective reporting; figure and date are undisputed in the record. - #2[confirmed][no action needed]in section: February 2022 Exploit — $326 Million Signature Verification Bypass
“The attack was technically rooted in Wormhole's reliance on a deprecated Solana standard library function called load_instruction_at.”
reviewerThe exploit was technically caused by the deprecated load_instruction_at function failing to validate the Instructions sysvar, allowing a forged Secp256k1 SignatureSet and use of complete_wrapped to mint wETH.Technical narrative matches the well-documented public post-mortems from Halborn, CertiK, and Kudelski Security; no contradicting technical account found. - #3[confirmed][no action needed]in section: February 2022 Exploit — $326 Million Signature Verification Bypass
“On-chain data also shows the attacker received 0.94 ETH from Tornado Cash prior to the attack, likely to cover transaction fees.”
reviewerIntermediate and final laundering addresses (0x8184..., 0xe317...) and 0.94 ETH received from Tornado Cash prior to the attack.Independently corroborated via on-chain analysis summaries; addresses and the Tornado Cash detail check out. - #4[confirmed][no action needed]in section: Jump Crypto Bailout and Fund Recovery Attempts
“Within approximately 24 hours of the exploit, Jump Crypto — the crypto arm of Chicago-based trading firm Jump Trading — announced it had deposited 120,000 ETH directly into the Wormhole bridge, fully replenishing the stolen collateral.”
reviewerJump Crypto deposited 120,000 ETH into Wormhole within ~24 hours to replenish stolen funds, described as the largest DeFi bailout at the time.Well-corroborated across CoinDesk, CoinTelegraph, Fortune, and Bloomberg reporting from Feb 2022. - #5[confirmed][no action needed]in section: Jump Crypto Bailout and Fund Recovery Attempts
“The operation — coordinated with Jump Crypto as the authorized third party under the court order — resulted in the recovery of approximately $140 million in assets (net of repaid DAI collateral debt).”
reviewerOasis counter-exploit under English High Court order recovered approximately $140 million net (after repaid DAI collateral debt), from a gross recovery of approximately $225 million.Multiple outlets report a $225M gross seizure that nets to roughly $140M after the hacker's DAI loan was repaid to unlock collateral; the page's net figure and framing are accurate. - #8[confirmed][no action needed]in section: Regulatory and Legal Aftermath
“In June 2024, Fortune reported that the U.S. Commodity Futures Trading Commission (CFTC) had launched an investigation into Jump Crypto. Jump Crypto President Kanav Kariya resigned shortly thereafter.”
reviewerIn June 2024, the CFTC opened an investigation into Jump Crypto and its President Kanav Kariya resigned shortly after.Confirmed by original Fortune reporting and corroborated by CCN coverage cited on the page. - #9[confirmed][no action needed]in section: Regulatory and Legal Aftermath
“Additionally, in December 2024, the SEC charged Jump Crypto's offshore entity, Tai Mo Shan Limited, with misleading investors about the stability of Terraform Labs' UST stablecoin and engaging in unregistered securities dealings in LUNA tokens; Jump agreed to settle for approximately $123 million.”
reviewerIn December 2024, the SEC charged Jump Crypto's offshore entity Tai Mo Shan Limited over Terra UST/LUNA conduct, settling for approximately $123 million.Settlement breakdown ($73.5M disgorgement, $12.9M interest, $36.7M penalty) sums to ~$123.1M, matching the page's figure exactly. - #10[confirmed][no action needed]in section: Protocol Overview
“Wormhole's core architecture relies on a decentralized set of 19 validator nodes called Guardians.”
reviewerWormhole's Guardian Network consists of 19 validator nodes requiring a 13-of-19 supermajority to produce a valid VAA.Matches official Wormhole documentation precisely. - #11[confirmed][no action needed]in section: Security Improvements and Post-Hack Rebuilding
“As of 2024, Wormhole reported completing 29 third-party security audits.”
reviewerAs of 2024, Wormhole had completed 29 third-party security audits, and Google Cloud was added as a Guardian node operator.Audit count and Google Cloud Guardian addition both corroborated by independent search results and the official Wormhole security page. - #13[confirmed][no action needed]in section: W Token Launch and Governance
“Under the initial tokenomics, 82% of the total W supply was locked at launch with a four-year vesting schedule. Allocations included 5.1% to the Guardian Network (vested), 17% to the community (11% unlocked at TGE for the airdrop and early programs), and 11.6% to strategic network participants.”
reviewerW tokenomics: 82% of total supply locked at launch with 4-year vesting; 5.1% to Guardian Network; 17% to community (11% unlocked at TGE); 11.6% to strategic network participants.Exact match to the official Wormhole tokenomics announcement; all figures independently confirmed. - #16[confirmed][no action needed]in section: Independence from Jump Trading and $225M Fundraise
“The team formally incorporated as Wormhole Labs in May 2023, with approximately 15 staff, most from Jump Crypto, departing the firm in August 2023 to focus solely on the protocol.”
reviewerWormhole team formally incorporated as Wormhole Labs in May 2023, with roughly 15 staff (mostly from Jump Crypto) departing in August 2023; CEO Saeed Badreg and COO Anthony Ramirez led the independent entity; Bloomberg first reported the separation in November 2023.Incorporation month, staff count, and departure month all corroborated. CEO/COO names also independently confirmed via search. - #17[confirmed][no action needed]in section: Independence from Jump Trading and $225M Fundraise
“Also in November 2023, Wormhole announced a $225 million funding round at a $2.5 billion valuation — the largest crypto fundraise of 2023 by deal size.”
reviewerWormhole announced a $225 million funding round at a $2.5 billion valuation in November 2023, the largest crypto fundraise of 2023 by deal size, structured as token warrants.Widely and consistently reported figure across CoinDesk, Fortune, Bloomberg, and Blockworks. - #18[confirmed][no action needed]in section: Cross-Chain Bridge Security Context
“The Drift Protocol exploit of April 2026, which involved losses of approximately $285 million, became the second-largest Solana ecosystem hack after Wormhole, illustrating the continued risk profile of high-value DeFi protocols built on Solana.”
reviewerThe Drift Protocol exploit of April 2026, involving losses of approximately $285 million, became the second-largest Solana ecosystem hack after Wormhole.This claim about a 2026 event (after this section's own listed sources were compiled) checks out against independent reporting, including Bloomberg, TRM Labs, and Elliptic coverage of the Drift hack. - #19[confirmed][no action needed]in section: Cross-Chain Bridge Security Context
“The Nomad Bridge lost approximately $190 million in August 2022 when a smart contract upgrade introduced a bug allowing any user to forge transfer proofs, triggering a chaotic free-for-all in which roughly 80% of losses were caused by copycat exploiters after the original attacker.”
reviewerThe Nomad Bridge lost approximately $190 million in August 2022, with roughly 80% of losses caused by copycat exploiters after the original attacker.Independent reporting on address-level breakdown of the Nomad hack supports the roughly 80% copycat-loss figure, though other sources frame the copycat share differently (e.g., by address count rather than dollar value). - #20[confirmed][no action needed]in section: Cross-Chain Bridge Security Context
“The Ronin Bridge (Axie Infinity) was hacked for approximately $625 million in March 2022 when attackers compromised private keys of five out of nine validator nodes through a spear-phishing campaign, gaining the threshold needed to authorize fraudulent withdrawals.”
reviewerRonin Bridge was hacked for approximately $625 million in March 2022 via compromise of five of nine validator keys through spear-phishing; Harmony Horizon Bridge was exploited for approximately $100 million in June 2022 via a 2-of-5 multisig compromise.Well-established facts consistent with extensive prior reporting; no contradiction found.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.