Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. How $323M in crypto was stolen from a blockchain bridge called Wormhole

How $323M in crypto was stolen from a blockchain bridge called Wormhole

Scheduled Pinned Locked Moved The Lounge
comcryptographyquestion
18 Posts 6 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • Sander RosselS Sander Rossel

    Eddy Vluggen wrote:

    Bridges use wrapped tokens, which lock tokens in one blockchain into a smart contract. After a decentralized cross-chain oracle called a “guardian” certifies that the coins have been properly locked on one chain, the bridge mints or releases tokens of the same value on the other chain. Wormhole bridges the Solana blockchain with other blockchains, including those for Avalanche, Oasis, Binance Smart Chain, Ethereum, Polygon, and Terra. But what if you can’t trust the guardian? AT lengthy analysis posted on Twitter a few hours after the heist said that Wormhole’s backend platform failed to properly validate its guardian accounts.

    This is mostly mumbo jumbo to me (and I suspect in general), so I have no idea what they're talking about :~ When I say "hacked" I mean in the broadest term of the word, social, technical, directly, indirectly... Basically, people are manipulating blockchains where I was told that isn't possible (because hashes would fail and you can't fake hashes blah blah...) :)

    Best, Sander Azure DevOps Succinctly (free eBook) Azure Serverless Succinctly (free eBook) Migrating Apps to the Cloud with Azure arrgh.js - Bringing LINQ to JavaScript

    L Offline
    L Offline
    Lost User
    wrote on last edited by
    #9

    Sander Rossel wrote:

    This is mostly mumbo jumbo to me (and I suspect in general), so I have no idea what they're talking about :~

    Lack of knowledge doesn't stop you from venting an opinion :)

    Sander Rossel wrote:

    Basically, people are manipulating blockchains where I was told that isn't possible

    The blockchain wasn't hacked, but a "bridge".

    Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

    Sander RosselS 1 Reply Last reply
    0
    • L Lost User

      Sander Rossel wrote:

      This is mostly mumbo jumbo to me (and I suspect in general), so I have no idea what they're talking about :~

      Lack of knowledge doesn't stop you from venting an opinion :)

      Sander Rossel wrote:

      Basically, people are manipulating blockchains where I was told that isn't possible

      The blockchain wasn't hacked, but a "bridge".

      Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

      Sander RosselS Offline
      Sander RosselS Offline
      Sander Rossel
      wrote on last edited by
      #10

      Ok, I'm going to water it down even further. Blockchain was untouchable according to the fanbois. It obviously isn't, as was to be expected. That's really my whole point. And I get it, it's not blockchain, but a bridge, blah blah... The fact is, someone had their money "safely" inside an "untouchable blockchain", and now it's gone.

      Eddy Vluggen wrote:

      Lack of knowledge doesn't stop you from venting an opinion :)

      Welcome to the internet ;)

      Best, Sander Azure DevOps Succinctly (free eBook) Azure Serverless Succinctly (free eBook) Migrating Apps to the Cloud with Azure arrgh.js - Bringing LINQ to JavaScript

      L 1 Reply Last reply
      0
      • Sander RosselS Sander Rossel

        Ok, I'm going to water it down even further. Blockchain was untouchable according to the fanbois. It obviously isn't, as was to be expected. That's really my whole point. And I get it, it's not blockchain, but a bridge, blah blah... The fact is, someone had their money "safely" inside an "untouchable blockchain", and now it's gone.

        Eddy Vluggen wrote:

        Lack of knowledge doesn't stop you from venting an opinion :)

        Welcome to the internet ;)

        Best, Sander Azure DevOps Succinctly (free eBook) Azure Serverless Succinctly (free eBook) Migrating Apps to the Cloud with Azure arrgh.js - Bringing LINQ to JavaScript

        L Offline
        L Offline
        Lost User
        wrote on last edited by
        #11

        Sander Rossel wrote:

        Ok, I'm going to water it down even further. Blockchain was untouchable according to the fanbois. It obviously isn't, as was to be expected. That's really my whole point. And I get it, it's not blockchain, but a bridge, blah blah..

        Let me repeat that, the blockchain isn't hacked. Your "point" is invalid. You might want to learn how it works, so you can actually say something about it that is viable. Aw, I don't own anything on a blockchain; I'm a silver-bug.

        Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

        Sander RosselS 1 Reply Last reply
        0
        • L Lost User

          Sander Rossel wrote:

          Ok, I'm going to water it down even further. Blockchain was untouchable according to the fanbois. It obviously isn't, as was to be expected. That's really my whole point. And I get it, it's not blockchain, but a bridge, blah blah..

          Let me repeat that, the blockchain isn't hacked. Your "point" is invalid. You might want to learn how it works, so you can actually say something about it that is viable. Aw, I don't own anything on a blockchain; I'm a silver-bug.

          Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

          Sander RosselS Offline
          Sander RosselS Offline
          Sander Rossel
          wrote on last edited by
          #12

          I didn't even use the word "hacked" in that post. I said "untouchable" to be more on-topic for this particular post (how dare I post about blockchain being hacked in a topic on a bridge connecting to a blockchain being hacked). Hacked or not, blockchains can be manipulated in ways that were earlier not accounted for. For my earlier comments about it being (un)hackable: Blockchains Were Supposed to Be “Unhackable.” Now They’re Getting Hacked.[^] Once hailed as unhackable, blockchains are now getting hacked[^] My point, that blockchain isn't as secure and airtight as once believed, stands. I've said absolutely nothing that wasn't true. Your "argument" that my entire point is invalid because I don't know enough about the subject is what we call an "ad hominem", attacking the person rather than their argument, and is completely uncalled for. A more appropriate response would be "Not blockchain, but a bridge, was hacked, so you're slightly off-topic." Got out of the wrong side of the bed this morning? :~

          Best, Sander Azure DevOps Succinctly (free eBook) Azure Serverless Succinctly (free eBook) Migrating Apps to the Cloud with Azure arrgh.js - Bringing LINQ to JavaScript

          L 1 Reply Last reply
          0
          • Sander RosselS Sander Rossel

            I didn't even use the word "hacked" in that post. I said "untouchable" to be more on-topic for this particular post (how dare I post about blockchain being hacked in a topic on a bridge connecting to a blockchain being hacked). Hacked or not, blockchains can be manipulated in ways that were earlier not accounted for. For my earlier comments about it being (un)hackable: Blockchains Were Supposed to Be “Unhackable.” Now They’re Getting Hacked.[^] Once hailed as unhackable, blockchains are now getting hacked[^] My point, that blockchain isn't as secure and airtight as once believed, stands. I've said absolutely nothing that wasn't true. Your "argument" that my entire point is invalid because I don't know enough about the subject is what we call an "ad hominem", attacking the person rather than their argument, and is completely uncalled for. A more appropriate response would be "Not blockchain, but a bridge, was hacked, so you're slightly off-topic." Got out of the wrong side of the bed this morning? :~

            Best, Sander Azure DevOps Succinctly (free eBook) Azure Serverless Succinctly (free eBook) Migrating Apps to the Cloud with Azure arrgh.js - Bringing LINQ to JavaScript

            L Offline
            L Offline
            Lost User
            wrote on last edited by
            #13

            Sander Rossel wrote:

            Your "argument" that my entire point is invalid because I don't know enough about the subject is what we call an "ad hominem", attacking the person rather than their argument, and is completely uncalled for.

            Not attacking the person, but his "ideas". It's not personal. Sorry if you feel that way.

            Sander Rossel wrote:

            Got out of the wrong side of the bed this morning? :~

            I got out of the wrong bed. Lucky guess.

            Sander Rossel wrote:

            I've said absolutely nothing that wasn't true.

            Didn't you? You just proven to lack knowledge on the subject, yet act as an authority. --edit Nearly forgot your main argument; you call it a personal attack, because I point out your lack of knowledge on the subject. If being dumb is an ad hominem, I admit.

            Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

            Sander RosselS 1 Reply Last reply
            0
            • L Lost User

              Sander Rossel wrote:

              Your "argument" that my entire point is invalid because I don't know enough about the subject is what we call an "ad hominem", attacking the person rather than their argument, and is completely uncalled for.

              Not attacking the person, but his "ideas". It's not personal. Sorry if you feel that way.

              Sander Rossel wrote:

              Got out of the wrong side of the bed this morning? :~

              I got out of the wrong bed. Lucky guess.

              Sander Rossel wrote:

              I've said absolutely nothing that wasn't true.

              Didn't you? You just proven to lack knowledge on the subject, yet act as an authority. --edit Nearly forgot your main argument; you call it a personal attack, because I point out your lack of knowledge on the subject. If being dumb is an ad hominem, I admit.

              Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

              Sander RosselS Offline
              Sander RosselS Offline
              Sander Rossel
              wrote on last edited by
              #14

              Eddy Vluggen wrote:

              Didn't you? You just proven to lack knowledge on the subject, yet act as an authority.

              This is how it feels to me. Authorities on the subject: Blockchain can't be hacked. News: Blockchain got hacked! (and ok, in this case a bridge to blockchain got hacked, resulting in stolen funds from blockchain) Me: I knew it! People said blockchain couldn't be hacked, but it got totally hacked. You: Your point is invalid because you have absolutely no knowledge of blockchain! I never said I have knowledge of blockchain and I did not act as an authority, I really have no idea where you got that idea. My story was really simple, everything can be hacked, including blockchain, despite authorities' earlier claims. That point was proven and I don't need to know any technical details to make that claim.

              Eddy Vluggen wrote:

              Not attacking the person, but his "ideas". It's not personal. Sorry if you feel that way.

              There's no "idea" that I, personally, have no knowledge about blockchain and there's also no "idea" that it's hacked even though people said it couldn't, so yeah, you're totally attacking me personally. You're even going as far to say my anecdote and proven claim is invalid because I have no knowledge on the subject. So anyway, I'm done talking to you for the time being.

              Best, Sander Azure DevOps Succinctly (free eBook) Azure Serverless Succinctly (free eBook) Migrating Apps to the Cloud with Azure arrgh.js - Bringing LINQ to JavaScript

              L 2 Replies Last reply
              0
              • Sander RosselS Sander Rossel

                Eddy Vluggen wrote:

                Didn't you? You just proven to lack knowledge on the subject, yet act as an authority.

                This is how it feels to me. Authorities on the subject: Blockchain can't be hacked. News: Blockchain got hacked! (and ok, in this case a bridge to blockchain got hacked, resulting in stolen funds from blockchain) Me: I knew it! People said blockchain couldn't be hacked, but it got totally hacked. You: Your point is invalid because you have absolutely no knowledge of blockchain! I never said I have knowledge of blockchain and I did not act as an authority, I really have no idea where you got that idea. My story was really simple, everything can be hacked, including blockchain, despite authorities' earlier claims. That point was proven and I don't need to know any technical details to make that claim.

                Eddy Vluggen wrote:

                Not attacking the person, but his "ideas". It's not personal. Sorry if you feel that way.

                There's no "idea" that I, personally, have no knowledge about blockchain and there's also no "idea" that it's hacked even though people said it couldn't, so yeah, you're totally attacking me personally. You're even going as far to say my anecdote and proven claim is invalid because I have no knowledge on the subject. So anyway, I'm done talking to you for the time being.

                Best, Sander Azure DevOps Succinctly (free eBook) Azure Serverless Succinctly (free eBook) Migrating Apps to the Cloud with Azure arrgh.js - Bringing LINQ to JavaScript

                L Offline
                L Offline
                Lost User
                wrote on last edited by
                #15

                Sorry, sorry, you misread me, or I used the wrong words. Probably the latter :)

                Sander Rossel wrote:

                News: Blockchain got hacked! (and ok, in this case a bridge to blockchain got hacked, resulting in stolen funds from blockchain)

                It didn't. Consider the blockchain a bank; it wasn't hacked. A bridge was hacked, a third party. Imagine you spend "real" money from your wallet, but transaction go through me. I steal from you. Does that mean your wallet is hacked?

                Sander Rossel wrote:

                I never said I have knowledge of blockchain and I did not act as an authority, I really have no idea where you got that idea.

                Might be due to your posting on the topic where you say "PROOF IT BEEN HACKED".

                Sander Rossel wrote:

                That point was proven and I don't need to know any technical details to make that claim.

                You don't need knowledge to make what claim? To be able to hack a readonly ledger that is copied often? :D

                Sander Rossel wrote:

                There's no "idea" that I, personally, have no knowledge about blockchain and there's also no "idea" that it's hacked even though people said it couldn't, so yeah, you're totally attacking me personally.

                NOOO! Ah, dammit, I'm just gonna shut up then. I hold you in high regards FWIW.

                Sander Rossel wrote:

                You're even going as far to say my anecdote and proven claim is invalid because I have no knowledge on the subject.

                A non sequitur, because it works different from what you painted. "Te kort door de bocht", to use a saying you familiar with. My apologies for making it feel like an attack. I guess I needn't send in my resume once your company grows?

                Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

                Sander RosselS 1 Reply Last reply
                0
                • Sander RosselS Sander Rossel

                  Eddy Vluggen wrote:

                  Didn't you? You just proven to lack knowledge on the subject, yet act as an authority.

                  This is how it feels to me. Authorities on the subject: Blockchain can't be hacked. News: Blockchain got hacked! (and ok, in this case a bridge to blockchain got hacked, resulting in stolen funds from blockchain) Me: I knew it! People said blockchain couldn't be hacked, but it got totally hacked. You: Your point is invalid because you have absolutely no knowledge of blockchain! I never said I have knowledge of blockchain and I did not act as an authority, I really have no idea where you got that idea. My story was really simple, everything can be hacked, including blockchain, despite authorities' earlier claims. That point was proven and I don't need to know any technical details to make that claim.

                  Eddy Vluggen wrote:

                  Not attacking the person, but his "ideas". It's not personal. Sorry if you feel that way.

                  There's no "idea" that I, personally, have no knowledge about blockchain and there's also no "idea" that it's hacked even though people said it couldn't, so yeah, you're totally attacking me personally. You're even going as far to say my anecdote and proven claim is invalid because I have no knowledge on the subject. So anyway, I'm done talking to you for the time being.

                  Best, Sander Azure DevOps Succinctly (free eBook) Azure Serverless Succinctly (free eBook) Migrating Apps to the Cloud with Azure arrgh.js - Bringing LINQ to JavaScript

                  L Offline
                  L Offline
                  Lost User
                  wrote on last edited by
                  #16

                  Posted this as an answer bit ago. Computer Scientist Explains One Concept in 5 Levels of Difficulty | WIRED - YouTube[^] I reviewed some books on cryptography before they were published. So yes, I know the subject. My name is in physical books. My salary demands just raised by 5%.

                  Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

                  1 Reply Last reply
                  0
                  • L Lost User

                    Sorry, sorry, you misread me, or I used the wrong words. Probably the latter :)

                    Sander Rossel wrote:

                    News: Blockchain got hacked! (and ok, in this case a bridge to blockchain got hacked, resulting in stolen funds from blockchain)

                    It didn't. Consider the blockchain a bank; it wasn't hacked. A bridge was hacked, a third party. Imagine you spend "real" money from your wallet, but transaction go through me. I steal from you. Does that mean your wallet is hacked?

                    Sander Rossel wrote:

                    I never said I have knowledge of blockchain and I did not act as an authority, I really have no idea where you got that idea.

                    Might be due to your posting on the topic where you say "PROOF IT BEEN HACKED".

                    Sander Rossel wrote:

                    That point was proven and I don't need to know any technical details to make that claim.

                    You don't need knowledge to make what claim? To be able to hack a readonly ledger that is copied often? :D

                    Sander Rossel wrote:

                    There's no "idea" that I, personally, have no knowledge about blockchain and there's also no "idea" that it's hacked even though people said it couldn't, so yeah, you're totally attacking me personally.

                    NOOO! Ah, dammit, I'm just gonna shut up then. I hold you in high regards FWIW.

                    Sander Rossel wrote:

                    You're even going as far to say my anecdote and proven claim is invalid because I have no knowledge on the subject.

                    A non sequitur, because it works different from what you painted. "Te kort door de bocht", to use a saying you familiar with. My apologies for making it feel like an attack. I guess I needn't send in my resume once your company grows?

                    Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

                    Sander RosselS Offline
                    Sander RosselS Offline
                    Sander Rossel
                    wrote on last edited by
                    #17

                    Eddy Vluggen wrote:

                    I hold you in high regards FWIW.

                    Eddy Vluggen wrote:

                    My apologies

                    I'm going to cherry pick this from your post and leave it at that :laugh:

                    Eddy Vluggen wrote:

                    I guess I needn't send in my resume once your company grows?

                    You can still try ;)

                    Best, Sander Azure DevOps Succinctly (free eBook) Azure Serverless Succinctly (free eBook) Migrating Apps to the Cloud with Azure arrgh.js - Bringing LINQ to JavaScript

                    L 1 Reply Last reply
                    0
                    • Sander RosselS Sander Rossel

                      Eddy Vluggen wrote:

                      I hold you in high regards FWIW.

                      Eddy Vluggen wrote:

                      My apologies

                      I'm going to cherry pick this from your post and leave it at that :laugh:

                      Eddy Vluggen wrote:

                      I guess I needn't send in my resume once your company grows?

                      You can still try ;)

                      Best, Sander Azure DevOps Succinctly (free eBook) Azure Serverless Succinctly (free eBook) Migrating Apps to the Cloud with Azure arrgh.js - Bringing LINQ to JavaScript

                      L Offline
                      L Offline
                      Lost User
                      wrote on last edited by
                      #18

                      Sander Rossel wrote:

                      I'm going to cherry pick this from your post and leave it at that :laugh:

                      That is the general gist.

                      Sander Rossel wrote:

                      You can still try ;)

                      No, not just yet. I'll wait until demand outgrows you; a year or two. And yes, I would change provinces for that.

                      Bastard Programmer from Hell :suss: "If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

                      1 Reply Last reply
                      0
                      Reply
                      • Reply as topic
                      Log in to reply
                      • Oldest to Newest
                      • Newest to Oldest
                      • Most Votes


                      • Login

                      • Don't have an account? Register

                      • Login or register to search.
                      • First post
                        Last post
                      0
                      • Categories
                      • Recent
                      • Tags
                      • Popular
                      • World
                      • Users
                      • Groups