Incident All ledgers
Portal: $326.0m
Portal lost $326.0m on 2 February 2022. Ranked 11th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 2 February 2022
- Lost
- $326.0m
- Returned or repaid
- $326.0m
- Target
- DeFi Protocol
- Category
- Input Validation
- Method
- Signature Verification Flaw
- Chains
- Solana
On February 2, 2022, attackers abused a deprecated, insecure signature verification function in Wormhole Portal to mint 120,000 wrapped ETH on Solana with no matching collateral on Ethereum, then redeemed it for real ETH. Losses were 326,000,000 dollars.
Against the ledger
- It ranks 11th of the 1,272 incidents with a known loss, and 4th in 2022.
- It accounts for 80.7% of the $404.1m in known losses in February 2022.
- 66 incidents in the ledger are classified as Input Validation, for $755.5m in total. This one is 43.1% of that.
- $326.0m is recorded as returned or repaid, 100.0% of the amount taken.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 31 Dec 2023 | Orbit Bridge | $81.7m | DeFi Protocol | Signature Verification Flaw | — |
| 28 Jan 2022 | Qubit | $80.0m | DeFi Protocol | Missing Input Validation | — |
| 23 Mar 2022 | Cashio | $52.8m | DeFi Protocol | Missing Input Validation | — |
| 19 Apr 2024 | Hedgey | $44.7m | DeFi Protocol | Missing Input Validation | — |
| 02 Oct 2022 | Transit Swap | $28.9m | DeFi Protocol | Missing Input Validation | — |
All failures in 2022 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Portal, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/portal-2022-02-02/. How this is built