Back to dashboard
Wednesday, February 2, 2022 at 18:24 UTC

Wormhole

Signature verification bypass; Jump backstopped loss.

Recovered
Funds stolen
$326.00M
Recovered
$326.00M100%
Still outstanding
$0.00M
Chain
Solana
Category
Bridge
Attack vector
Bridge Exploit
Reported by
CertiK
Incident ID
h2022-1

Exploit & recovery timeline

  1. Feb 2, 2022 · 16:24 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the bridge exploit exploit against Wormhole.

  2. Feb 2, 2022 · 18:24 UTC
    Exploit executed

    $326.0M drained from Wormhole on Solana via Bridge Exploit.

  3. Feb 2, 2022 · 19:24 UTC
    Detected by CertiK

    CertiK flagged the anomalous transactions and published an initial alert.

  4. Feb 2, 2022 · 22:24 UTC
    Protocol response

    Wormhole paused affected contracts or withdrawals and began tracing outbound flows.

  5. Feb 3, 2022 · 18:24 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Feb 9, 2022 · 18:24 UTC
    Full recovery

    $326.0M returned to users — negotiation, freezes, or a whitehat return closed the incident.