Hacken Token

The global blockchain community is shocked by the recent Wormhole hack. Malicious actors have stolen $320M in ETH. It’s just the first explosion, vulnerabilities in blockchain protocols will soon result in a series of mega hacks, Solana at the greatest risk.Wormhole is the bridge between Solana and other DeFi networks. The project’s team has already addressed the vulnerability stating that users’ assets are in safety. It is the biggest hack in 2022 and the second biggest DeFi hack in history. The Wormhole team <a href="https://twitter.com/wormholecrypto/status/1489232008521859079?s&#61;21" rel="noopener noreferrer nofollow">has restored all funds</a>.Hacken CEO Dyma Budorin commented on the hack: “Wormhole incident is the first big hack of non-Ethereum protocols. It&#39;s just a matter of time when other big protocols experience severe attacks&#39;&#39;.According to Dyma, <a href="https://twitter.com/buda_kyiv/status/1489177594989846530?s&#61;20&amp;t&#61;gEEJRMxHeW8r_IvHHweTOA" rel="noopener noreferrer nofollow">security audits and pentests</a> are the only tools to mitigate the risk of future attacks.Hacken team has warned the global community numerous times of the security risks attributable to major non-Ethereum protocols including Solana. Namely, we shared our security concerns during the recent <a href="https://conference.solana.com/" rel="noopener noreferrer nofollow">Solana Breakpoint</a> event that took place in November 2021. As we can see, not all projects have paid enough attention to security.Dyma Budorin discussing the future of Solana (growth and risks)<img src="https://academy-public.coinmarketcap.com/optimized-uploads/f5a8fa0b3cb84fb1af215b3a9ca737ed.jpeg" />Hacken lead smart contracts auditor <a href="https://www.linkedin.com/in/evgeniy-bezuglyi-06134b7a?lipi&#61;urn%3Ali%3Apage%3Ad_flagship3_profile_view_base_contact_details%3BF9%2Ba2hwNQnKp9q%2BfYXcwKQ%3D%3D" rel="noopener noreferrer nofollow">Evgeniy Bezuglyi</a> agrees with the comment made by Dyma Budorin: “The Wormhole case is just the beginning of real bombing targeting non-Ethereum protocols. Although projects hold full responsibility for the security of assets at their disposal, Solana may be also blamed for providing the instrument with security flaws to its projects. Solana has not instructed projects on how to safely use it. Considering a high level of transparency in blockchain, by introducing the update, Solana demonstrated to the whole blockchain community the vulnerabilities of its instrument. Unlikely that Solana actively communicates with the projects that use this instrument”.Based on this comment, we can see that security is always a shared responsibility. But, without any doubt, Wormhole might have prevented the incident by auditing the instruments it used.<h2 id="header-0">Wormhole Hack: key lesson learned</h2>The detailed analysis of the Wormhole hack you can find in<a href="https://twitter.com/kelvinfichter/status/1489041221947375616?s&#61;21" rel="noopener noreferrer nofollow"> this Twitter thread</a>. We would like to focus your attention on the one crucial point:All accounts involved in the processing of a transaction need to be validated. Even when it seems that an account is to be validated by any other parties except for you, don’t hesitate to validate it.<img src="https://academy-public.coinmarketcap.com/optimized-uploads/6c3625a285f743f58fd696dab7b6652c.png" />Validated system address used for a legit transaction (Source: <a href="https://twitter.com/kelvinfichter/status/1489041221947375616?s&#61;21" rel="noopener noreferrer nofollow">Twitter thread</a>)<img src="https://academy-public.coinmarketcap.com/optimized-uploads/0d2c3470e72d4444b6a2f74cb2b68a0c.png" />Non-validated system address used for the fake deposit of 120 ETH  (Source: <a href="https://twitter.com/kelvinfichter/status/1489041221947375616?s&#61;21" rel="noopener noreferrer nofollow">Twitter thread</a>)Wormhole Hack is likely to be just a prelude to mega hacks on Solana. It’s not a horror story, it’s a call to action, call to security.For more information about Hacken and recent news/updates, please refer to these channels:<a href="https://twitter.com/hackenclub" rel="noopener noreferrer nofollow">Hacken Club Twitter</a><a href="https://t.me/hackenclub" rel="noopener noreferrer nofollow">Hacken Club Telegram Chat</a><a href="https://t.me/hackenio" rel="noopener noreferrer nofollow">Hacken Club Announcements</a><a href="https://hackenfoundation.com/" rel="noopener noreferrer nofollow">Hacken Foundation Website</a><a href="https://hackenclub.medium.com/" rel="noopener noreferrer nofollow">Hacken Medium</a><a href="https://www.reddit.com/r/hacken/" rel="noopener noreferrer nofollow">Hacken Reddit</a>

Wormhole Hack: Future Big Attacks On Non-Ethereum Protocols Inevitable

Table of Contents

Hacken.AI

Other articles published on Feb 4, 2022

4th January BURN

Metaxy Private Round Token Claim

Pirate x Pirate Private Sale

Strategic Partnership: DAOStarter partners with Bitliberte

DAO Token's Rise to an Institutional Grade Asset

Grimm's First Look: The Demon is in the Details

Join our free newsletter for daily crypto updates!