NIGHT Bridge Exploit on Cardano: $515M in Tokens Reportedly Drained
Key Takeaways
- •The reported $515 million figure refers to the amount of NIGHT tokens affected, not a confirmed dollar loss.
- •The tokens involved were reportedly valued at approximately $9 million when the exploit occurred.
- •Current reporting describes the incident as a Wanchain-Cardano bridge issue rather than a Cardano network-wide failure.
- •Wanchain and the Midnight Foundation have been central to the early public response as the investigation continues.
- •Further clarity is expected from official updates, bridge status changes, and on-chain tracing by security monitors.

A reported exploit of the NIGHT bridge connected to Cardano has been pegged at $515 million in tokens, marking an early-stage crypto security incident that remains under active investigation. No full post-mortem has yet been published to settle the details of what occurred.
What Is Known About the Reported NIGHT Bridge Exploit
The core claim circulating is that a bridge tied to the NIGHT token was exploited, with the affected amount reported at $515 million worth of NIGHT. Cross-chain bridges like the one involved here function as infrastructure that locks assets on one blockchain and issues corresponding representations on another, and their role as custodians of those locked assets has made them a recurring focal point for security incidents across the DeFi sector. According to reporting by crypto.news, the incident has been framed as a Wanchain-Cardano bridge event rather than a confirmed protocol failure across the wider Cardano network.
The same reporting notes that the drained tokens were worth approximately $9 million at the time of the exploit. This substantial gap between face value and market value is a common occurrence when a large token supply is moved during an exploit, as flooding the market with tokens would significantly depress prices. Readers should treat the $515 million headline figure as a reported token amount rather than a verified financial loss.
Both the Wanchain team, through its official account on X, and the Midnight Foundation have been the primary voices in the early public response. Meanwhile, blockchain security monitors have flagged suspicious activity as the situation continues to develop. Notably, this incident follows an earlier report of the same bridge losing approximately $13 million after a NIGHT signature inflation exploit, underscoring that the bridge has been a recurring point of security scrutiny.
Why the Reported $515M Figure Matters
A headline number of this scale signals a potentially major bridge security event. Cross-chain bridges have long been among the highest-risk components in cryptocurrency infrastructure because they concentrate assets across different blockchains. That very concentration is what makes bridges attractive targets for attackers and what renders users' cross-chain balances vulnerable when something goes wrong.
For anyone potentially exposed, the immediate practical questions are whether funds remain accessible, whether the bridge has been paused, and how liquidity has been affected. While sentiment can shift quickly following incidents of this nature, at this stage any market effects remain conditional and unconfirmed rather than measured.
The key details: the $515 million figure represents a reported token amount, its market value was described as considerably smaller at roughly $9 million, and the story is still developing rather than resolved. The framing supported by available reporting points to bridge-specific risk rather than a broader failure of the underlying Cardano chain — a distinction that matters for Cardano users whose assets on the network itself are not necessarily affected by a bridge-layer exploit.
What to Watch Next
Developing exploit stories typically hinge on official statements and technical follow-up. The most informative next signals are expected to come directly from the Midnight Foundation's own updates and from any formal incident response that confirms both cause and scope.
Bridge status is the second critical item to monitor. A pause, a partial reopening, or a maintenance notice would each significantly alter the risk picture for users holding cross-chain assets.
On-chain fund tracing, including analysis published by security monitors such as Phalcon, will be instrumental in establishing whether the reported $515 million figure holds up once specific addresses and token movements are examined in detail.
Any recovery or reimbursement plan should be treated as an item to monitor rather than a promise. The broader debate about bridge and protocol security has drawn commentary from prominent figures including Charles Hoskinson, whose remarks were covered in a CoinDesk video segment tied to earlier Wanchain bridge issues. Incidents such as this, along with cases like a token that plunged 99% after a suspected exploit, serve as reminders to verify claims against on-chain data before drawing conclusions.
This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk.