What Happened in the Wormhole Bridge Exploit?
In 2022, a signature-check flaw let an attacker mint about 120,000 unbacked wrapped ETH through the Wormhole bridge. Here's how it happened and what it teaches.
In February 2022, an attacker created around 120,000 wrapped ETH out of thin air on Solana by fooling the Wormhole bridge into skipping a critical security check. The exploit shows exactly how a wrapped token can lose its backing in an instant.
What Wormhole Does
Wormhole is a bridge connecting multiple blockchains, including Ethereum and Solana. When ETH is locked on Ethereum, the bridge mints a matching amount of wrapped ETH on Solana. That minting is supposed to happen only after a group of trusted validators, called guardians, confirm the deposit with their signatures.
What Went Wrong
The flaw was in how the bridge's program on Solana verified those guardian signatures. The attacker found a way to supply a fake account in place of the one the program should have used to check signatures. The program accepted it, so the attacker could present a "verified" message without any real guardian approval.
How Much Was Created
With that fake approval, the attacker minted about 120,000 wrapped ETH on Solana, worth roughly $320 million at the time, with no ETH locked behind it. Part of it was then bridged back to Ethereum and withdrawn as real ETH.
Why This Threatened Every Holder of Wrapped ETH
Every wrapped ETH token on Solana was supposed to be backed one-to-one by ETH on Ethereum. Suddenly, 120,000 tokens had no backing at all, which meant the entire supply was under-collateralized. Without intervention, holders faced the risk of wrapped ETH trading below real ETH.
How the Gap Was Closed
Jump Crypto, a firm closely associated with the project, replaced the missing 120,000 ETH within about a day, restoring full backing. Roughly a year later, part of the stolen funds was recovered through a court-authorized counter-operation.
Lesson One: Wrapped Tokens Are Only as Good as Their Backing
A wrapped token's value depends entirely on the bridge correctly verifying every mint. A single verification flaw can create unbacked tokens instantly.
Lesson Two: A Rescue Isn't a Guarantee
Users were protected because a well-funded backer chose to cover the loss. That's a decision, not a mechanism. Many other bridge exploits ended with users absorbing the losses.
Lesson Three: Signature Checks Are Everything
Bridges rely on proving that the right parties approved an action. The Wormhole exploit didn't steal any keys; it convinced the system that approval existed when it didn't, echoing the authorization failures seen in other bridge incidents.
Check the bridge and backing behind any wrapped token you hold. The wrapper is only as strong as the verification behind it.