Wanchain Bridge Exploit Highlights Cross-Chain Vulnerabilities

A recent security exploit on Wanchain's Cardano-BNB Chain bridge has resulted in a $13 million loss, highlighting the vulnerabilities of cross-chain bridges. The issue arose due to a missing separator in the bridge code, which allowed one legitimate signature to be reused for a much larger transaction.

The attack occurred between 14:46 and 14:55 UTC on July 20, 2026, with four transactions draining approximately $515 million from the Cardano-side bridge reserve. The loss is estimated to be between $9 million and $13 million, depending on the price used.

Charles Hoskinson, founder of Cardano, has pointed out that legacy third-party bridge architecture is a major issue, and that zero-knowledge systems could provide a more secure solution. He argued that software is now under heavier attack due to AI-driven exploit discovery tools making vulnerability hunting faster.