{"id":262788,"date":"2022-09-19T10:45:11","date_gmt":"2022-09-19T09:45:11","guid":{"rendered":"https:\/\/cryptoslate.com\/?p=262788"},"modified":"2022-09-19T10:32:50","modified_gmt":"2022-09-19T09:32:50","slug":"ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit","status":"publish","type":"post","link":"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/","title":{"rendered":"Ethereum PoW loses 200 WETH to Omni bridge vulnerability exploit"},"content":{"rendered":"

A replay attack against\u00a0 Omni bridge resulted in a hacker exploiting 200 WETH from the Ethereum PoW chain.<\/p>\n

On Sept. 18, security firm BlockSec identified a replay attack launched against the Ethereum PoW chain.<\/p>\n

The attacker transferred 200 WETH from the Ethereum PoS chain through the Omni bridge. The transaction was reportedly replicated on the Ethereum PoW chain.<\/p>\n

\n

3\/ The exploiter (0x82fae) first transferred 200 WETH through the omni bridge of the Gnosis chain, and then replayed the same message on the PoW chain and got extra 200 ETHW. As a result, the balance of the chain contract deployed on the PoW chain would be drained.<\/p>\n

\u2014 BlockSec (@BlockSecTeam) September 18, 2022<\/a>\u00a0<\/span><\/p><\/blockquote>\n

Omni bridge failed to validate the actual chainID before approving the transaction. As a result, the PoW chain was drained of 200 WETH.<\/p>\n

According to security firm Certik,<\/a> the attacker has transferred the funds through Mexc Global for possible cash out.<\/p>\n

EthereumPoW is Safu<\/h2>\n

From the TX hash of the exploit, the ETHPoS<\/a> and ETHPoW<\/a> had different transaction data.<\/p>\n

ETHW Core developers clarified<\/a> that the replay attack was impossible against EthereumPoW as it enforced EIP-155.<\/p>\n

By design, EIP-155 includes the chainID of a transaction to avoid replays of the transaction on different chains.<\/p>\n

ETHW Core added that the attack exploited a contract vulnerability of the Omni bridge. The bridge has been informed to address the issue.<\/p>\n

Slow adoption for ETHW<\/h2>\n

Since launching on Sept. 15. Ethereum PoW has not gathered much adoption from the crypto community.<\/p>\n

Leading exchanges like FTX, OKX, and Bybit rallied around to see that spot trading opened for the ETHW token on Sept. 16. As a result, ETHW price reached an all-time high of $60.68.<\/p>\n

However, with the general market decline and low excitement post-merge, ETHW has fallen below $5,<\/a> shedding off over 90% of its all-time high gain as press time.<\/p>\n

Grayscale investment hinted at plans<\/a> to sell off its 3.1 million ETHPoW airdrop tokens. The firm said it will sell the tokens and redistribute the proceeds to shareholders.<\/p>\n","protected":false},"excerpt":{"rendered":"

A replay attack against\u00a0 Omni bridge resulted in a hacker exploiting 200 WETH from the Ethereum PoW chain. On Sept. 18, security firm BlockSec identified a replay attack launched against the Ethereum PoW chain. The attacker transferred 200 WETH from the Ethereum PoS chain through the Omni bridge. The transaction was reportedly replicated on the […]<\/p>\n","protected":false},"author":1378,"featured_media":262814,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16041,2376,76736],"tags":[],"post_folder":[],"acf":[],"yoast_head":"\nEthereum PoW loses 200 WETH to Omni bridge vulnerability exploit<\/title>\n<meta name=\"description\" content=\"A replay attack against Omni bridge resulted in a hacker exploiting 200 WETH from the Ethereum PoW chain.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ethereum PoW loses 200 WETH to Omni bridge vulnerability exploit\" \/>\n<meta property=\"og:description\" content=\"A replay attack against Omni bridge resulted in a hacker exploiting 200 WETH from the Ethereum PoW chain.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/\" \/>\n<meta property=\"og:site_name\" content=\"CryptoSlate\" \/>\n<meta property=\"article:published_time\" content=\"2022-09-19T09:45:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-09-19T09:32:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/09\/image_2022-09-19_142605457.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Christian Nwobodo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:site\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christian Nwobodo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/\"},\"author\":{\"name\":\"Christian Nwobodo\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/587b303452d5bdb2285937c263e623dd\"},\"headline\":\"Ethereum PoW loses 200 WETH to Omni bridge vulnerability exploit\",\"datePublished\":\"2022-09-19T09:45:11+00:00\",\"dateModified\":\"2022-09-19T09:32:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/\"},\"wordCount\":330,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"articleSection\":[\"Hacks\",\"Mining\",\"Tokenization\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/#respond\"]}],\"copyrightYear\":\"2022\",\"copyrightHolder\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/\",\"url\":\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/\",\"name\":\"Ethereum PoW loses 200 WETH to Omni bridge vulnerability exploit\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/#website\"},\"datePublished\":\"2022-09-19T09:45:11+00:00\",\"dateModified\":\"2022-09-19T09:32:50+00:00\",\"description\":\"A replay attack against Omni bridge resulted in a hacker exploiting 200 WETH from the Ethereum PoW chain.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptoslate.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ethereum PoW loses 200 WETH to Omni bridge vulnerability exploit\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptoslate.com\/#website\",\"url\":\"https:\/\/cryptoslate.com\/\",\"name\":\"CryptoSlate\",\"description\":\"Cryptocurrency News and Real-time Coin Data\",\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":[\"Organization\",\"NewsMediaOrganization\"],\"@id\":\"https:\/\/cryptoslate.com\/#organization\",\"name\":\"CryptoSlate\",\"url\":\"https:\/\/cryptoslate.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"CryptoSlate\"},\"image\":{\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/twitter.com\/cryptoslate\",\"https:\/\/www.instagram.com\/cryptoslate\",\"https:\/\/www.linkedin.com\/company\/cryptoslate\",\"https:\/\/www.youtube.com\/c\/cryptoslate\",\"https:\/\/cryptoslate.substack.com\",\"https:\/\/t.me\/cryptoslatenews\",\"https:\/\/www.tiktok.com\/@cryptoslatenews\"],\"publishingPrinciples\":\"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles\",\"ownershipFundingInfo\":\"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/\",\"actionableFeedbackPolicy\":\"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback\",\"correctionsPolicy\":\"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback\",\"ethicsPolicy\":\"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles\",\"foundingDate\":\"2017-08-04\",\"founder\":[{\"@type\":\"Person\",\"name\":\"Nate Whitehill\"},{\"@type\":\"Person\",\"name\":\"Matthew Blancarte\"}],\"contactPoint\":[{\"@type\":\"ContactPoint\",\"contactType\":\"customer support\",\"url\":\"https:\/\/cryptoslate.com\/contact\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"sales\",\"url\":\"https:\/\/cryptoslate.com\/advertising\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"newsroom\",\"url\":\"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback\",\"email\":\"tips@cryptoslate.com\",\"availableLanguage\":\"en-US\"}],\"masthead\":\"https:\/\/cryptoslate.com\/about\/#masthead\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/587b303452d5bdb2285937c263e623dd\",\"name\":\"Christian Nwobodo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/12\/chriscen-author-150x150.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/12\/chriscen-author-150x150.jpg\",\"caption\":\"Christian Nwobodo\"},\"description\":\"Christian is a crypto-curious nerd who loves to investigate how protocols work under the hood. Christian is interested in DeFi protocol research, token economics, and on-chain analytics.\",\"url\":\"https:\/\/cryptoslate.com\/author\/christian-nwobodo\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ethereum PoW loses 200 WETH to Omni bridge vulnerability exploit","description":"A replay attack against Omni bridge resulted in a hacker exploiting 200 WETH from the Ethereum PoW chain.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/","og_locale":"en_US","og_type":"article","og_title":"Ethereum PoW loses 200 WETH to Omni bridge vulnerability exploit","og_description":"A replay attack against Omni bridge resulted in a hacker exploiting 200 WETH from the Ethereum PoW chain.","og_url":"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/","og_site_name":"CryptoSlate","article_published_time":"2022-09-19T09:45:11+00:00","article_modified_time":"2022-09-19T09:32:50+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/09\/image_2022-09-19_142605457.png","type":"image\/png"}],"author":"Christian Nwobodo","twitter_card":"summary_large_image","twitter_creator":"@cryptoslate","twitter_site":"@cryptoslate","twitter_misc":{"Written by":"Christian Nwobodo","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/#article","isPartOf":{"@id":"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/"},"author":{"name":"Christian Nwobodo","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/587b303452d5bdb2285937c263e623dd"},"headline":"Ethereum PoW loses 200 WETH to Omni bridge vulnerability exploit","datePublished":"2022-09-19T09:45:11+00:00","dateModified":"2022-09-19T09:32:50+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/"},"wordCount":330,"commentCount":0,"publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"articleSection":["Hacks","Mining","Tokenization"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/#respond"]}],"copyrightYear":"2022","copyrightHolder":{"@id":"https:\/\/cryptoslate.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/","url":"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/","name":"Ethereum PoW loses 200 WETH to Omni bridge vulnerability exploit","isPartOf":{"@id":"https:\/\/cryptoslate.com\/#website"},"datePublished":"2022-09-19T09:45:11+00:00","dateModified":"2022-09-19T09:32:50+00:00","description":"A replay attack against Omni bridge resulted in a hacker exploiting 200 WETH from the Ethereum PoW chain.","breadcrumb":{"@id":"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cryptoslate.com\/ethereum-pow-loses-200-weth-to-omni-bridge-vulnerability-exploit\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptoslate.com\/"},{"@type":"ListItem","position":2,"name":"Ethereum PoW loses 200 WETH to Omni bridge vulnerability exploit"}]},{"@type":"WebSite","@id":"https:\/\/cryptoslate.com\/#website","url":"https:\/\/cryptoslate.com\/","name":"CryptoSlate","description":"Cryptocurrency News and Real-time Coin Data","publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"inLanguage":"en-US"},{"@type":["Organization","NewsMediaOrganization"],"@id":"https:\/\/cryptoslate.com\/#organization","name":"CryptoSlate","url":"https:\/\/cryptoslate.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","width":1000,"height":1000,"caption":"CryptoSlate"},"image":{"@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/twitter.com\/cryptoslate","https:\/\/www.instagram.com\/cryptoslate","https:\/\/www.linkedin.com\/company\/cryptoslate","https:\/\/www.youtube.com\/c\/cryptoslate","https:\/\/cryptoslate.substack.com","https:\/\/t.me\/cryptoslatenews","https:\/\/www.tiktok.com\/@cryptoslatenews"],"publishingPrinciples":"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles","ownershipFundingInfo":"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/","actionableFeedbackPolicy":"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback","correctionsPolicy":"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback","ethicsPolicy":"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles","foundingDate":"2017-08-04","founder":[{"@type":"Person","name":"Nate Whitehill"},{"@type":"Person","name":"Matthew Blancarte"}],"contactPoint":[{"@type":"ContactPoint","contactType":"customer support","url":"https:\/\/cryptoslate.com\/contact\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"sales","url":"https:\/\/cryptoslate.com\/advertising\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"newsroom","url":"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback","email":"tips@cryptoslate.com","availableLanguage":"en-US"}],"masthead":"https:\/\/cryptoslate.com\/about\/#masthead"},{"@type":"Person","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/587b303452d5bdb2285937c263e623dd","name":"Christian Nwobodo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/12\/chriscen-author-150x150.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/12\/chriscen-author-150x150.jpg","caption":"Christian Nwobodo"},"description":"Christian is a crypto-curious nerd who loves to investigate how protocols work under the hood. Christian is interested in DeFi protocol research, token economics, and on-chain analytics.","url":"https:\/\/cryptoslate.com\/author\/christian-nwobodo\/"}]}},"_links":{"self":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/262788"}],"collection":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/users\/1378"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/comments?post=262788"}],"version-history":[{"count":7,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/262788\/revisions"}],"predecessor-version":[{"id":262818,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/262788\/revisions\/262818"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media\/262814"}],"wp:attachment":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media?parent=262788"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/categories?post=262788"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/tags?post=262788"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/post_folder?post=262788"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}