Ongoing exploit of Meter Passport bridge results in $2.3 million loss
An exploit of Meter Passport on BNB Chain led to the minting of unbacked wrapped MTRG. The attacker sold part of the minted tokens on PancakeSwap, resulting in a loss of approximately $2.3 million.
Our full investigation: Meter Passport exploit: the “$2.3 million” was printed, not taken
An ongoing exploit was reported involving Meter Passport, a bridge associated with Meter.io, on BNB Chain. The attacker managed to mint a significant amount of unbacked wrapped MTRG tokens through the bridge. This exploit was detected while it was still in progress, indicating that the situation was active at the time of the report.
The mechanism of the attack involved minting unbacked wrapped MTRG, which was then partially sold on PancakeSwap. The report indicated that around $2,300,000 worth of unbacked wMTRG had been minted in approximately two transactions when the alert was issued. This suggests that the exploit was executed rapidly, allowing the attacker to capitalize on the situation before it was fully addressed.
The incident highlights vulnerabilities within the Meter Passport bridge, particularly in its minting process. The specific details regarding the BNB Chain provide context for tracing the transactions related to this exploit. However, the on-chain record does not specify any addresses involved in the minting or selling of the tokens.
Addresses in this incident
| Address | Chain | Role | Check |
|---|---|---|---|
| 0xee2eeeed4ed8580669ed924abeb49f27f7d0bd65 | BSC | mentioned in coverage | Check live |
| 0x44cf94496091150865e192a86c07b90a9760b43d | BSC | mentioned in coverage | Check live |
Roles are attributed to the source that stated them. Addresses without an attributed role are listed because coverage mentioned them, not because we assign them a part in the incident.