Crypto platform Wormhole hit by $320 million hack

livemint.com:

Hackers have stolen cryptocurrency worth more than $320 million from a decentralised finance platform, the fourth-largest crypto heist on record and the latest to shake the fast-growing DeFi sector.

Wormhole, a site that allows the transfer of information from one crypto network to another, said on Twitter on Wednesday that it was "exploited" for 120,000 units of a version of the second-largest cryptocurrency, ether.

Wormhole did not immediately respond to a Reuters request for comment.

London-based blockchain analysis firm Elliptic said that attackers were able to fraudulently create the wETH tokens, almost 94,000 of which were later transferred to the ethereum blockchain, which powers transactions for ether.

Wormhole said in another tweet early on Thursday that it had fixed the vulnerability in its system but was still working to get the network back up.

So-called DeFi platforms allow users to lend, borrow and save - usually in cryptocurrencies - while bypassing traditional gatekeepers of finance such as banks.

Cash has poured into DeFi sites, mirroring the explosion of interest in cryptocurrencies as a whole. Many investors, facing historically low or sub-zero interest rates, are drawn to DeFi by the promise of high returns on savings.

Yet with their breakneck growth, DeFi platforms have emerged as a major hacking risk, with bugs in code and design flaws allowing criminals to target DeFi sites and deep pools of liquidity, and also to launder the proceeds of crime, while leaving few traces.

Fraud and theft at DeFi platforms surpassed $10 billion last year, research showed on Thursday, laying bare the risks in the fast-growing but mostly unregulated area of cryptocurrencies.

In August, hackers behind likely the biggest