Leaderboard
204All-time rank
W

Wanchain

Jul 21, 2026

$10.0M
Lost
$10.0M
Recovered
$0
Net loss
$10.0M
Unrecovered0% recovered

On July 21, 2026, Wanchain's Cardano-BNB Chain bridge was drained of ~515M NIGHT tokens. The TreasuryCheck validator concatenated 14 variable-length fields without separators, allowing a signature authorizing ~3,110 NIGHT to be reused for vastly larger redemptions.

Target
Bridge
Classification
Input Validation
Technique
Signature Verification Flaw
Attribution
Unknown
Chains
Cardano

Event timeline

  1. Jul 21, 2026
    Exploit executed — $10.0M drained via signature verification flaw
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents