Meter lost $4,4 million to DeFi bridge exploit
The theft of tokens caused a supply crisis on the Moonriver crypto exchange
08.02.2022 - 11:40
746
2 min
0
What’s new? The Meter Passport platform’s representatives have reported a loss of $4,4 million on Twitter because of the DeFi bridge exploit. A hacker took advantage of the vulnerability to steal tokens from the platform and then sold them on the Moonriver exchange at an undervalued price. This has led to a supply crisis.
1. Around 6am Pacific time we identified someone was able to leverage a vulnerability of the bridge to mint a large amount of BNB and WETH tokens and depleted the bridge reserve for BNB on WETH.— ⚡️Meter.io⚡️ (@Meter_IO) February 5, 2022
What are the details of the hack? The hackers used a feature on the Meter platform that automatically wraps and unwraps gas tokens such as ETH and BNB for user convenience. However, the contract did not block direct interaction of the wrapped ERC20 tokens for its own gas token and did not verify the correct number of wETH transferred from the callers’ addresses. The extended code had a “wrong trust assumption” that allowed hackers to fake BNB and ETH transfers by calling the underlying ERC20 deposit function.
How did the hacker cause a crisis on Moonriver? The attacker sold the stolen BNB tokens on the decentralized SushiSwap exchange at undervalued prices. This caused BNB prices on Hundred Finance’s Moonriver platform to plummet by 77%. The users then bought cheap tokens and used them to get ETH, FRAX, and MIM credits. However, because of the price discrepancy, their loans were worth more than the collateral, causing a supply crisis. Hundred Finance suffered a loss of $3,3 million.
The Meter team has pledged to reimburse its community and Hundred Finance for the losses incurred as a result of the hack.
Useful material?
Telegram 
Twitter Incidents
In a single week, hackers went after PHP websites, the Railway cloud platform and a medical company, and experts started talking about a crisis that is only just beginning.
Oct 28, 2026
Incidents
In 104 minutes, the attacker emptied 1,404 addresses before validators halted the network and froze almost all of the loot.
Oct 19, 2026
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Cryptocurrency rates
-
Bitcoin
$76 735
BTC
-3.25%
-
Ethereum
$2 241.34
ETH
-1.82%
-
BNB Smart Chain
$699
BSC
-1.66%
-
Ripple
$1.42
XRP
+1.04%
-
TRON
$0.330745
TRX
-5.06%
-
Zcash
$1 237.76
ZEC
-2.47%
-
Dogecoin
$0.075355
DOGE
-1.41%
-
Cardano
$0.218269
ADA
+2.11%
-
Stellar XLM
$0.184461
XLM
+2.83%
-
Bitcoin Cash
$288.77
BCH
+4.39%