Skip to content

Wormhole

Failure type
Hack
Date
February 2022
Reported loss
~120,000 wrapped ETH (publicly reported estimate)

What happened

Wormhole, a bridge issuing wrapped assets across several chains, lost roughly 120,000 wrapped ether in February 2022 when an attacker exploited a flaw in how its Solana-side contract verified the guardian signatures that authorise a mint. The attacker was able to produce a mint that the contract accepted without a matching deposit on Ethereum, leaving the wrapped tokens undercollateralised. Jump Crypto, which backed the project, replaced the missing ether so that holders of the wrapped asset were made whole.

What to take from it

A wrapped token is a claim that something is held elsewhere. When the check that enforces that link is broken, the token keeps circulating and looking normal while the collateral behind it no longer exists — and whether users are made whole comes down to whether somebody with a balance sheet chooses to step in.

Dates and figures are widely reported public estimates from coverage at the time, not KripZen's own audited data.

Where it sits on the record

The documented exchange failures we track, in the order they happened.

  1. 2014Mt. Gox
  2. 2015Bitstamp
  3. 2016Bitfinex
  4. 2016The DAO
  5. 2017Parity Multisig Wallet Freeze
  6. 2018BitConnect
  7. 2018Coincheck
  8. 2019Binance
  9. 2019Bitfinex / Crypto Capital
  10. 2019QuadrigaCX
  11. 2020KuCoin
  12. 2022Celsius Network
  13. 2022Crypto.com
  14. 2022FTX
  15. 2022Ronin Bridge
  16. 2022Terra / LUNA
  17. 2022Three Arrows Capital
  18. 2022Wormhole (You are here)
  19. 2023HTX (formerly Huobi)
  20. 2024DMM Bitcoin
  21. 2025Bybit