Wanchain Cardano Bridge Exploit Results in $9 Million Loss

Exploit on Wanchain Cardano Bridge Causes $9 Million Loss

A significant security incident has been reported concerning the Wanchain’s Cardano-to-BNB Chain bridge, which suffered an exploit leading to the drain of approximately 515 million NIGHT tokens, valued at around $9 million, according to blockchain security firm BlockSec.

Details of the Exploit

BlockSec’s analysis indicates that the exploit is linked to vulnerabilities in the bridge’s TreasuryCheck validator. The firm’s investigation highlighted that the structure of the validator produces messages for signing that could allow for signature reuse. This flaw might enable attackers to manipulate field values while maintaining the validity of a previously signed message.

Following the incident, NIGHT’s value witnessed a substantial decline, falling by more than 30% within a single day as panic selling ensued. CoinGecko reported that the token was trading at approximately $0.0186 at its lowest, underscoring the volatility of the market.

Midnight Foundation’s Response

The Midnight Foundation has sought to clarify the situation, confirming that the breach was isolated to Wanchain’s bridge infrastructure and did not impact the Midnight Network itself. They noted that all core operations of the Midnight protocol, including its validators and consensus systems, were functioning normally.

Technical Analysis

BlockSec emphasized the need for a more robust encoding method to avoid ambiguities that might lead to such vulnerabilities. They noted that the bridge uses Cardano’s SerialiseData function but failed to employ it effectively when creating the signature hash. This oversight may have contributed to the exploit.

Bridge Security and Broader Implications

The Wanchain incident highlights ongoing challenges in the security of cross-chain transactions within the cryptocurrency ecosystem. Previous exploits in 2026 have raised concerns about the safety of bridges, which often serve as vital infrastructure yet present numerous vulnerabilities due to their complex transaction verification processes.

As investigations continue, Wanchain has not yet released a comprehensive assessment detailing the transaction flow or the specific vulnerabilities exploited. The situation remains dynamic and underscores the importance of security measures in the evolving landscape of blockchain technology.