Another Hack Has Occurred in the Cryptocurrency Market—It Is Still Ongoing

A new security incident has occurred in the cryptocurrency sector. According to a statement by the security company BlockAid, the Meter Passport bridge in the Meter.io ecosystem was attacked, and the attackers minted approximately $2.3 million worth of wMTRG on the $BNB Chain, which has no real backing.

Initial findings indicate that attackers minted a large amount of uncollateralized wrapped MTRG (wMTRG) using a cross-chain bridging mechanism. It was noted that some of the tokens produced were sold via PancakeSwap, and the attack was reportedly carried out through approximately two transactions in its initial phase.

Meter.io stated that the incident was not limited to the bridge on the $BNB Chain, but involved an abuse of a block validation vulnerability on the Meter mainnet. According to the project, the attack began on September 23 at 18:14. The attacker exploited the vulnerability to create worthless MTR and MTRG tokens, sold them on decentralized exchanges, and transferred some of the proceeds to other networks.

As a security measure, bridge operations on the Meter mainnet have been temporarily suspended. The team requests that users refrain from conducting any transactions on the Meter network until further notice; including sending, exchanging, or transferring MTR or MTRG via the bridge.