X

Blockchain platform Wormhole says it's retrieved the $324M stolen by hackers

Developers behind the popular blockchain bridge say services are back up, too.

Steven Musil Night Editor / News
Steven Musil is the night news editor at CNET News. He's been hooked on tech since learning BASIC in the late '70s. When not cleaning up after his daughter and son, Steven can be found pedaling around the San Francisco Bay Area. Before joining CNET in 2000, Steven spent 10 years at various Bay Area newspapers.
Expertise I have more than 30 years' experience in journalism in the heart of the Silicon Valley.
Steven Musil
Ethereum logo on a phone screen

Online thieves made off with "wrapped ethereum" worth more than $324 million.

Getty Images

Hackers stole more than $324 million in cryptocurrency from Wormhole, the developers behind the popular blockchain bridge confirmed Wednesday.

The platform provides a connection that allows for the transfer of cryptocurrency between different decentralized-finance blockchain networks. Wormhole said in a series of tweets Wednesday afternoon that thieves made off with 120,000 wETH, or wrapped ethereum, worth nearly $324 million at current exchange rates. The platform's network was also taken offline for maintenance.

This is one of the largest crypto thefts of all time and the second-largest theft from a DeFi service, blockchain analysis firm Elliptic said in a statement. DeFi is any financial tool that uses blockchain technology to circumvent middleman institutions.

"The exploit appears to have allowed the attacker to mint 120,000 wrapped ETH on the Solana blockchain, 93,750 ETH of which was then transferred to the Ethereum blockchain," Elliptic said in a blog post. 

Certus One, the developers of Wormhole, offered the hacker a $10 million "bug bounty" for the exploit details and return of the cryptocurrency, according to a message shared by Elliptic's Tom Robinson.

Wormhole on Thursday confirmed via Twitter that "all funds have been restored" and its services are back up. It also promised to share a full incident report.

Certus One didn't respond to a request for comment.

CNET's Sean Keane contributed to this report.