Incident All ledgers
Wanchain: $10.0m
Wanchain lost $10.0m on 21 July 2026. Ranked 192nd of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 21 July 2026
- Lost
- $10.0m
- Returned or repaid
- None recorded
- Target
- Chain
- Category
- Input Validation
- Method
- Signature Verification Flaw
- Chains
- Cardano
Wanchain's Cardano-BNB Chain bridge lost about $10 million on July 21, 2026, when roughly 515M NIGHT tokens were drained. A validator flaw that joined variable-length fields without separators let a signature approving about 3,110 NIGHT be reused for far larger redemptions.
Against the ledger
- It ranks 192nd of the 1,272 incidents with a known loss, and 27th in 2026.
- It accounts for 3.9% of the $254.7m in known losses in July 2026.
- 66 incidents in the ledger are classified as Input Validation, for $755.5m in total. This one is 1.3% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 22 Nov 2020 | Pickle | $19.7m | DeFi Protocol | Missing Input Validation | — |
| 27 Oct 2022 | Team Finance | $15.8m | DeFi Protocol | Missing Input Validation | — |
| 28 Mar 2024 | PrismaLST | $11.6m | DeFi Protocol | Missing Input Validation | — |
| 08 Feb 2022 | Superfluid | $8.7m | DeFi Protocol | Missing Input Validation | — |
| 06 Feb 2022 | Meter | $7.7m | DeFi Protocol | Missing Input Validation | — |
All failures in 2026 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Wanchain, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/wanchain-2026-07-21/. How this is built