{"id":44319,"date":"2023-01-24T08:50:15","date_gmt":"2023-01-24T12:50:15","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=44319"},"modified":"2023-01-24T08:50:18","modified_gmt":"2023-01-24T12:50:18","slug":"wormhole-bridge-exploiter-transfers-155m-in-eth","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/wormhole-bridge-exploiter-transfers-155m-in-eth\/","title":{"rendered":"Wormhole bridge exploiter transfers $155M in ETH"},"content":{"rendered":"\n<h5 class=\"wp-block-heading\" id=\"h-earlier-this-week-an-explosion-of-on-chain-activity-was-observed-at-the-address-associated-with-the-320-million-dollar-wormhole-exploit\">Earlier this week, an explosion of on-chain activity was observed at the address associated with the <a href=\"https:\/\/coinscreed.com\/staging\/hackers-steal-321m-from-wormhole-token-bridge-platform.html\" target=\"_blank\" rel=\"noreferrer noopener\">320 million-dollar Wormhole exploit.<\/a><\/h5>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/01\/nomad_hack_1659419294046_1659419294244_1659419294244-1024x576.webp\" alt=\"Wormhole bridge exploiter transfers $155M in ETH\" class=\"wp-image-44323\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/01\/nomad_hack_1659419294046_1659419294244_1659419294244-1024x576.webp 1024w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/01\/nomad_hack_1659419294046_1659419294244_1659419294244-300x169.webp 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/01\/nomad_hack_1659419294046_1659419294244_1659419294244-768x432.webp 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/01\/nomad_hack_1659419294046_1659419294244_1659419294244-1536x865.webp 1536w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/01\/nomad_hack_1659419294046_1659419294244_1659419294244-150x84.webp 150w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/01\/nomad_hack_1659419294046_1659419294244_1659419294244-750x422.webp 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/01\/nomad_hack_1659419294046_1659419294244_1659419294244-1140x642.webp 1140w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/01\/nomad_hack_1659419294046_1659419294244_1659419294244.webp 1599w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Wormhole bridge exploiter transfers $155M in ETH<\/figcaption><\/figure>\n\n\n\n<p>The hacker of Wormhole, one of the <a href=\"https:\/\/coinscreed.com\/staging\/cross-chain-aggregation-is-the-future-of-defi.html\" target=\"_blank\" rel=\"noreferrer noopener\">largest cross-chain bridges<\/a> between Solana and other blockchains has transferred stolen cash totalling $155 million in ETH to a decentralized exchange for the first time in months.<\/p>\n\n\n\n<p>CertiK's blockchain data indicated that 95,630 ETH was transmitted to the OpenOcean DEX before being converted into ETH-pegged assets such as Lido Finance's staked ETH (stETH) and wrapped staked ETH (wsETH) (wstETH).<\/p>\n\n\n\n<p>The exploiter then utilized the wrapped staked Ether (wstETH) as collateral for a $13 million loan in the stablecoin DAI in order to purchase almost 7,989.5 ETH through KyberNetwor. The deals were performed several times.<\/p>\n\n\n\n<p>Following the unexpected surge in on-chain activity, <a href=\"https:\/\/www.google.com\/search?q=Wormhole+bridge+exploiter+transfers+%24155M+in+ETH&oq=Wormhole+bridge+exploiter+transfers+%24155M+in+ETH&aqs=chrome..69i57j0i546l3j0i30i546l2.692j0j7&sourceid=chrome&ie=UTF-8\" target=\"_blank\" rel=\"noreferrer noopener\">the team<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a> offered the hacker a $10 million bounty in an embedded message in a transaction using the Wormhole: Deployer, which read,<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cWe would like to reiterate our previous offer of a $10 million bounty for the total return of all the stolen funds. You can reach out to us at bounty@wormholenetwork.com or reply on chain.\u201d<\/p>\n<\/blockquote>\n\n\n\n<p>With the increased activity, Ancilla, a cybersecurity firm, has warned that many of the ad listings displayed by Google for the search &#8220;Wormhole Bridge&#8221; are phishing websites.<\/p>\n\n\n\n<p>This exploit was one of the <a href=\"https:\/\/coinscreed.com\/staging\/october-is-now-cryptos-biggest-hack-month-report.html\" target=\"_blank\" rel=\"noreferrer noopener\">most significant cyberattacks of 2022<\/a>. The hacker took advantage of a flaw in the popular cross-chain protocol's validation system, allowing them to illegally generate wrapped ETH, which was then converted into ETH.<br>The hacker stole approximately 120,000 Wormhole Ethereum (WeETH) valued at over $320 million in a series of transactions.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Earlier this week, an explosion of on-chain activity was observed at the address associated with the 320 million-dollar Wormhole exploit. The hacker of Wormhole, one of the largest cross-chain bridges between Solana and other blockchains has transferred stolen cash totalling $155 million in ETH to a decentralized exchange for the first time in months. CertiK&#8217;s [&hellip;]<\/p>\n","protected":false},"author":38,"featured_media":44323,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[13134,128,275,13133],"class_list":["post-44319","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-cross-chain-bridges","tag-ethereum","tag-solana","tag-wormhole-2"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/01\/nomad_hack_1659419294046_1659419294244_1659419294244.webp","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/44319","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/38"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=44319"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/44319\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/44323"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=44319"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=44319"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=44319"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}