$4.4M Lost in Smart Contract Hack of Meter Passport Bridge

Due to a smart contract hack, the Meter Passport token bridge platform has lost $4.4 million, while Hundred Finance has lost $3.3 million due to under-collateralized loans. The Meter Passport (MTRG) from Meter.io is a token bridge that works with Ethereum and its sidechains. The Moonriver side of the bridge was targeted in this attack. Moonriver is a smart contract platform built on the Kusama network by Polkadot. Hundred Finance is a cryptocurrency loan platform that is built on Compound Finance technology. According to a Feb. 6 announcement from the Meter team, around $4.4 million in Binance Coin (BNB) and wETH were minted through a ‘wrong trust assumption’ in the code starting at 2 p.m. UTC on February 5. In this situation, an arbitrary amount of ETH was placed into Meter, and the hacker leveraged the vulnerability to mint tokens. The attack triggered a chain reaction throughout the Kusama-based Moonriver ecosystem. The attacker sold the BNB on SushiSwap, a popular decentralized exchange, after emptying Meter’s BNB and wETH reserves. This resulted in a 77% drop in BNB prices on Moonriver at the moment. A handful of shrewd investors took advantage of the price drop by purchasing low-cost BNB. They utilized the tokens as collateral to get ETH, FRAX, and MIM loans via Hundred Finance. However, because of the BNB price disparity, their loans were worth more than the collateral they had given, resulting in a supply crisis. Surpr...