In a shocking turn of events, cross-chain protocol Wanchain has fallen victim to a hacker attack, resulting in the theft of NIGHT tokens. The attacker, who has since made contact, is demanding the return of 90% of the stolen funds, promising "white hat immunity" in return. This incident has sent ripples through the crypto community, raising fresh concerns about the security of blockchain bridges and DeFi protocols.

The Attack and the Demand

According to reports, the hacker exploited a vulnerability in Wanchain's infrastructure, making off with a significant amount of NIGHT tokens. The attack was discovered when users noticed unusual transactions. Wanchain's team has yet to release an official statement, but the attacker has already communicated their demands.

The demand is clear: 90% of the stolen tokens must be returned, and in exchange, the attacker will provide a detailed report of the vulnerability, allowing the team to patch it. This "white hat" approach is not uncommon in the crypto space, where hackers sometimes choose to return funds in exchange for a bug bounty or to avoid legal repercussions.

What is Wanchain and NIGHT?

Wanchain is a blockchain platform designed to facilitate cross-chain interoperability, allowing different blockchains to communicate and transfer assets seamlessly. The project has been running for several years and has a dedicated user base. NIGHT is the native token of the Wanchain ecosystem, used for staking, governance, and transaction fees.

The theft of NIGHT tokens is a serious blow to the platform, as it undermines user trust and raises questions about the security of cross-chain protocols. This incident adds to a growing list of DeFi hacks in 2026, which have collectively resulted in billions of dollars in losses.

Security Concerns in the Crypto Space

This attack highlights the ongoing security challenges facing the crypto industry. While blockchain technology is often praised for its security, the applications built on top of it are only as secure as their code. Smart contract bugs and vulnerabilities in bridges have been a recurring theme in major hacks this year.

Users are advised to exercise caution and consider using hardware wallets and multi-signature solutions for large holdings. Additionally, projects should conduct rigorous audits and implement bug bounty programs to identify vulnerabilities before they are exploited.

The Attacker's Strategy

The attacker's demand for a 90% return is a calculated move. By promising to return the majority of the funds, they position themselves as a "white hat" hacker, potentially avoiding legal action. This strategy has been used in several previous hacks, such as the Poly Network attack in 2021, where the hacker returned the stolen funds and was later offered a job.

However, it remains to be seen whether Wanchain will accept the terms. The team may choose to negotiate, or they may involve law enforcement. The crypto community is closely watching the situation, as the outcome could set a precedent for future incidents.

What Happens Next?

At the time of writing, Wanchain's team has not made a public statement. The attacker has set a deadline for the response, but the details are scarce. If the team agrees to the terms, they will need to ensure that the returned tokens are handled securely and that the vulnerability is patched promptly.

In the meantime, users of Wanchain are urged to monitor their accounts and move their funds to safer platforms if necessary. The exchange where the stolen tokens were listed, Bitget, has also been notified and is likely to cooperate with the investigation.

Key Takeaways

  • Wanchain suffered a hack resulting in the theft of NIGHT tokens.
  • The attacker demands 90% return of the stolen funds, offering a vulnerability report in exchange.
  • The incident raises security concerns for cross-chain protocols and DeFi platforms.
  • Users should stay vigilant and consider enhanced security measures.

As the situation unfolds, we will continue to provide updates. For now, the crypto world holds its breath, hoping for a resolution that strengthens the industry's resilience against such attacks.