GSD-2022-1000076
- Source
- https://data.gsd.id/GSD-2022-1000076
- Import Source
- https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000076.json
- JSON Data
- https://api.osv.dev/v1/vulns/GSD-2022-1000076
- Withdrawn
- 2023-03-14T07:04:18.328547Z
- Published
- 2022-02-02T23:13:19.928218Z
- Modified
- 2023-03-14T07:04:18.328547Z
- Summary
- Unknown vulnerability in Wormhole on 2022-02-02 resulting in 120K ETH on Solana by an attacker.
- Details
-
An attacker was able to exploit a bug in Wormhole allowing them to mint 120K ETH on Solana worth approximately $300 Million USD. This has been confirmed with an on-chain message from Wormhole offering a $10 Million USD bug bounty if the newly minted tokens are returned to Wormhole. Wormhole has also stated that the vulnertability has been patched.
- References
-
- https://decrypt.co/91899/hacker-steals-250-million-solana-ethereum-bridge-wormhole
- https://www.notifi.xyz/messages/1497
- https://twitter.com/DefiantNews/status/1489012237683486721
- https://thedefiant.io/wormhole-exploit-320m/
- https://twitter.com/samczsun/status/1488974372756987906
- https://twitter.com/wormholecrypto/status/1488997053631971331
- https://twitter.com/VitalikButerin/status/1479501366192132099
- https://old.reddit.com/r/ethereum/comments/rwojtk/ama_we_are_the_efs_research_team_pt_7_07_january/hrngyk8/
- https://twitter.com/RektHQ/status/1488994599318208512
- https://twitter.com/tony_intern/status/1488979589602840581
- https://twitter.com/0xB07DAD/status/1488982652174540802
- https://twitter.com/wormholecrypto/status/1489001949881978883
- https://twitter.com/wormholecrypto/status/1488976115750383626
- https://twitter.com/wormholecrypto/status/1489036273012682753
- https://etherscan.io/tx/0x24c7d855a0a931561e412d809e2596c3fd861cc7385566fd1cb528f9e93e5f14
- https://twitter.com/samczsun/status/1489044939732406275