Connect with us

News

USDT Supply Suddenly Dropped by $1.1 Billion. That Does Not Mean Tether Broke.

Avatar photo

Published

on

For half an hour on May 30, the stablecoin market flashed one of those strange signals that instantly wakes up crypto traders: Tether’s USDT supply appeared to shrink by more than $1.1 billion. According to data cited by BingX and tracked through DeFiLlama, USDT fell from roughly $189.325 billion to about $188.216 billion around noon UTC. The move was abrupt, large, and unexplained in the immediate aftermath. In a market where stablecoins function as crypto’s settlement layer, even a short-lived billion-dollar supply contraction is enough to trigger the obvious question: what the hell just happened to USDT?

A Billion-Dollar Supply Move in 30 Minutes

The reported drop was not about USDT losing its dollar peg. It was about circulating supply.

That distinction matters. A depeg would mean USDT was trading materially below or above $1. A supply reduction means the number of tokens counted as circulating declined. In normal stablecoin mechanics, this can happen when tokens are redeemed and burned, when supply is moved between chains, when treasury or authorized-but-unissued balances are reclassified, or when data providers update how they count tokens across networks.

The market saw a simple headline number: more than $1.1 billion disappeared from USDT supply in roughly 30 minutes. But the underlying explanation is more complex. Tether issues USDT across multiple blockchains, including Ethereum, Tron, and several other networks. Supply can shift between chains through minting, burning, swaps, and inventory management. A large reduction in circulating supply does not automatically mean panic redemptions, insolvency, or a market crisis.

Still, the size of the move makes it worth watching. In stablecoins, supply is not just a statistic. It is a proxy for liquidity demand, exchange settlement, DeFi activity, market confidence, and institutional flows.

Tether Is Still the Stablecoin Giant

Even after the sudden contraction, Tether remains by far the largest stablecoin issuer in the world. DeFiLlama showed USDT at roughly $188 billion in market capitalization after the move, with USDT dominance close to 59% of the total stablecoin market. Circle’s USDC, the second-largest stablecoin, sat near $75.9 billion in circulating supply, according to DeFiLlama and CoinMarketCap data.

That gap is enormous. USDC is important, heavily used, and institutionally respected, especially in U.S.-regulated environments. But Tether remains the dominant dollar token across global crypto trading, offshore exchanges, emerging-market payments, and Tron-based stablecoin flows.

This is why any unusual movement in USDT supply attracts attention. Tether is not just another issuer. It is a central piece of crypto market plumbing. When USDT supply expands, traders often read it as a sign that dollar liquidity is entering the market. When it contracts sharply, they look for signs of redemptions, risk reduction, exchange outflows, or technical adjustments.

The May 30 move may ultimately turn out to be operational rather than dramatic. But the market is conditioned to treat large USDT shifts as meaningful until proven otherwise.

The Most Likely Explanations

The exact reason for the sudden drop was not immediately clear. Without a direct statement from Tether explaining the specific May 30 movement, it is irresponsible to claim certainty. But there are several plausible explanations.

The first is a redemption and burn. Tether customers can redeem USDT for dollars through Tether’s platform, subject to its terms and minimum requirements. When large institutional users redeem, the corresponding USDT can be removed from circulation. A billion-dollar redemption is large, but not impossible at Tether’s current scale.

The second possibility is chain inventory management. Tether frequently manages liquidity across multiple blockchains. If demand shifts from one chain to another, Tether may burn USDT on one network and mint on another. Depending on timing and how data providers count supply, this can temporarily look like a sharp contraction.

The third possibility is a data classification adjustment. Stablecoin dashboards separate circulating supply, authorized but unissued tokens, unreleased supply, and chain-specific balances. A change in how one of those categories is counted can create a sudden visible move without representing a market shock.

The fourth possibility is a large exchange or institutional balance movement. If a major venue or market maker changes how it holds or redeems USDT, the supply data can move quickly.

None of these explanations are automatically bearish. The problem is that opacity leaves room for speculation.

Why Traders Care About USDT Supply

USDT supply matters because stablecoins are the cash layer of crypto.

Bitcoin and Ethereum get the headlines, but stablecoins carry much of the market’s day-to-day liquidity. Traders park capital in USDT between positions. Exchanges use it as a dominant quote asset. DeFi protocols use it for lending, liquidity pools, settlement, and collateral. In many markets outside the United States, USDT functions almost like a synthetic dollar account.

That gives Tether’s supply data psychological weight. A rising USDT supply is often interpreted as fresh buying power entering the system. A falling supply can be interpreted as capital leaving crypto, traders reducing risk, or institutions redeeming dollars.

Those interpretations are not always accurate. Stablecoin supply can move for boring operational reasons. But traders still watch it because stablecoin liquidity often leads broader market behavior.

A sudden $1.1 billion contraction does not automatically predict a crypto selloff. But it does tell the market to look more closely at flows, exchange balances, peg stability, redemption activity, and chain-level changes.

The Peg Held, Which Is the Key Point

The most important signal is that USDT did not appear to suffer a major peg event. CoinMarketCap showed USDT trading close to $1, with its market cap still around $188 billion and heavy daily trading volume. DeFiLlama also showed USDT remaining broadly near its peg, even as supply changed.

That is the difference between a supply contraction and a stablecoin crisis.

A stablecoin crisis usually shows up in price first. If holders fear they cannot redeem, the token starts trading below $1. If confidence breaks, liquidity fragments across exchanges, spreads widen, and arbitrage becomes harder. That is not what the available data suggests happened here.

Instead, the market saw a large supply adjustment while USDT remained functionally stable. That points more toward redemption, burn, inventory movement, or data accounting than a confidence shock.

Still, the lack of a depeg does not make the event irrelevant. It simply changes the framing. This was not “USDT is collapsing.” It was “USDT supply suddenly contracted, and the market does not yet know why.”

Tether’s Balance Sheet Is Bigger Than Ever

The timing is interesting because Tether recently reported another highly profitable quarter. In its Q1 2026 attestation, reported by CoinDesk and Yahoo Finance, Tether said it generated about $1.04 billion in net profit and had excess reserves of roughly $8.23 billion. CoinDesk also reported that Tether listed total assets just under $192 billion against liabilities slightly above $183.5 billion, with a large share of reserves held in U.S. government-backed instruments.

That context cuts both ways.

On one side, Tether’s scale and profitability make a $1.1 billion supply movement less alarming than it would be for a smaller issuer. At nearly $188 billion in supply, a billion-dollar reduction is meaningful but not existential. It represents a fraction of USDT’s total circulating base.

On the other side, Tether’s size makes every large move systemically important. The bigger Tether gets, the more its supply changes matter not only for crypto traders but also for stablecoin regulation, Treasury market exposure, exchange liquidity, and dollar access in emerging markets.

Tether is no longer just a crypto company issuing a trading token. It is one of the most important private dollar-liquidity engines in the digital asset economy.

This Is Also a Transparency Story

The real issue is not that USDT supply moved. Stablecoin supply is supposed to be elastic. Issuers mint when demand rises and burn when redemptions occur. A healthy stablecoin should expand and contract.

The issue is that sudden billion-dollar moves invite speculation when the market lacks immediate, granular explanations.

Tether has improved its reporting over the years, especially through quarterly attestations, but critics still argue that the issuer should provide more real-time transparency around reserves, redemptions, chain-level supply changes, and counterparties. Supporters counter that Tether has consistently processed redemptions, maintained its peg through repeated market stress, and built the most widely used stablecoin in crypto.

Both views explain the market reaction. Tether has earned enormous practical trust through usage. But it still operates in an environment where traders want faster answers when numbers move suddenly.

In traditional finance, a billion-dollar balance-sheet adjustment by a systemically important dollar instrument would come with disclosure, settlement context, or regulatory reporting. Crypto often gets the chart first and the explanation later.

USDT Versus USDC: The Gap Remains Massive

The May 30 supply drop does not change the stablecoin hierarchy. Tether remains far ahead of Circle.

USDC has advantages in regulatory positioning, U.S. institutional relationships, and transparency perception. Circle is publicly traded and has built a reputation around compliance-first stablecoin infrastructure. But in actual circulating supply, global exchange usage, and emerging-market crypto liquidity, USDT remains the market leader by a wide margin.

That dominance is especially important on Tron, where USDT has become a major rail for low-cost stablecoin transfers. For many users, USDT is not simply a trading pair. It is the digital dollar they actually use.

This is why a $1.1 billion supply reduction can be both dramatic and non-fatal. It is dramatic because the number is huge. It is non-fatal because Tether’s base is even larger.

What to Watch Next

The key question now is whether the drop was a one-off operational adjustment or the beginning of a broader contraction.

If USDT supply stabilizes around current levels and the peg remains firm, the May 30 move will likely be remembered as a large but routine burn, redemption, or accounting adjustment. If supply continues falling, traders will start asking whether institutional users are redeeming, whether exchange demand is weakening, or whether stablecoin liquidity is rotating elsewhere.

Chain-level data will matter. A burn on one blockchain followed by a mint on another would suggest inventory management. A broad cross-chain decline would point more toward net redemption. Exchange balances will also matter, especially if major trading venues show meaningful USDT outflows or changes in liquidity.

The peg remains the clearest real-time confidence signal. As long as USDT trades near $1 across major venues, the market is not pricing a Tether crisis. But if supply keeps contracting while spreads widen, the story would become more serious.

A Strange Move, Not a Stablecoin Meltdown

The cleanest interpretation is this: USDT just had a large supply contraction that has not yet been fully explained. That is worth attention, but it is not the same thing as a stablecoin collapse.

Tether remains the world’s largest stablecoin issuer. USDT remains close to its dollar peg. Its supply is still around $188 billion. Circle’s USDC remains far behind in total circulation. The broader stablecoin market remains enormous, with DeFiLlama showing total stablecoin market capitalization near $320 billion.

But the event is a reminder of how dependent crypto has become on a handful of private dollar issuers. A billion-dollar supply shift in USDT can happen quickly, before the market has a clear explanation, and everyone from traders to analysts is left reverse-engineering the meaning from dashboards.

That is the strange reality of modern crypto liquidity. The market runs on stablecoins, stablecoins run on trust, and trust still depends on how quickly issuers explain what happened when the chart suddenly moves.

For now, USDT did not break. But the market noticed.

News

CLARITY Act Nears a Defining Vote as Crypto Regulation Gains Momentum in Washington

Avatar photo

Published

on

The long-running debate over cryptocurrency regulation in the United States may finally be approaching a turning point. After years of uncertainty over which federal agency should oversee digital assets, lawmakers are once again pushing the Digital Asset Market Clarity Act—better known as the CLARITY Act—toward a Senate vote.

Supporters believe the legislation could become the first comprehensive framework governing most of the U.S. crypto market. Critics argue important issues remain unresolved, particularly around political ethics and potential conflicts of interest. Yet even with those disagreements, momentum behind the bill appears stronger than at any previous point.

Coinbase Vice Chair Ryan VanGrack recently described the outlook as having “tremendous momentum,” suggesting bipartisan negotiations have moved the legislation significantly closer to becoming law. His comments come as lawmakers continue negotiations ahead of a possible Senate floor vote this week.

Why the CLARITY Act Matters

For years, the U.S. crypto industry has operated under an uncertain regulatory framework.

The Securities and Exchange Commission has argued that many cryptocurrencies qualify as securities, while the Commodity Futures Trading Commission has maintained authority over digital commodities such as Bitcoin. The lack of clear legal definitions has produced years of enforcement actions, court battles and regulatory confusion.

Rather than creating entirely new agencies, the CLARITY Act seeks to establish clear rules determining which regulator oversees different types of digital assets.

The proposal is designed to answer one of the industry’s most important questions: when is a cryptocurrency a security, and when does it become a commodity?

That distinction determines everything from disclosure requirements to exchange licensing, token issuance and investor protections.

Supporters argue the absence of clear rules has pushed innovation overseas while leaving both companies and consumers uncertain about their legal obligations.

What the Bill Would Do

Although the legislation remains subject to amendments, the core objectives have remained relatively consistent throughout negotiations.

The CLARITY Act would establish clearer regulatory boundaries between the SEC and the CFTC, with many decentralized digital assets expected to fall under commodity-style oversight once they satisfy specified decentralization standards.

The bill also establishes registration frameworks for digital asset trading platforms, brokers and market participants while introducing disclosure requirements for token issuers during earlier stages of a project’s development.

Rather than relying primarily on enforcement actions after alleged violations occur, the legislation attempts to define regulatory obligations before businesses launch products.

Industry participants have argued that this approach would make compliance substantially easier while encouraging legitimate innovation inside the United States instead of abroad.

The Push for Bipartisan Support

Unlike some earlier crypto legislation, the CLARITY Act has attracted support from members of both political parties.

That bipartisan backing has been essential because comprehensive financial legislation rarely succeeds without cooperation across party lines.

According to Coinbase Vice Chair Ryan VanGrack, negotiations over recent months have produced meaningful compromises that address several Democratic concerns regarding consumer protection and market integrity.

VanGrack, who previously served at the SEC before joining Coinbase, argues the latest version reflects months of bipartisan negotiations rather than a one-sided industry proposal.

That bipartisan effort has become increasingly important as cryptocurrency regulation evolves from a niche technology issue into mainstream financial policy.

Consumer Protection Became a Major Negotiating Point

One of the largest criticisms of earlier versions of the legislation centered on investor protection.

Following the collapse of FTX and several other major crypto firms, many lawmakers insisted that any comprehensive crypto legislation must include stronger safeguards for customers.

According to VanGrack, Democrats successfully negotiated additional consumer protection measures into the legislation.

Among the reported additions are stronger insider trading safeguards, enhanced protections against market abuse and provisions intended to prevent regulatory gaps similar to those exposed during the FTX collapse.

Supporters argue these changes demonstrate that the bill is no longer focused solely on encouraging innovation but also on protecting retail investors.

That balance has become politically necessary after several high-profile failures damaged public confidence in the crypto industry.

The Ethics Debate Isn’t Over

Despite the apparent progress, one of the most controversial issues surrounding the legislation remains unresolved.

During negotiations, several Democratic lawmakers pushed for stronger ethics provisions intended to address concerns over public officials’ involvement with digital asset businesses.

However, reports indicate that a merged draft released last week removed one of the ethics provisions Democrats had demanded during negotiations.

That decision prompted several lawmakers to publicly oppose the latest version of the bill, arguing that potential conflicts of interest have not been adequately addressed.

The ethics debate has become increasingly prominent amid broader political discussions surrounding cryptocurrency investments by elected officials and individuals connected to government.

While supporters argue those questions should be addressed through separate ethics legislation, critics contend that crypto market legislation cannot ignore them.

Whether additional amendments emerge before a final Senate vote remains uncertain.

Will the Senate Approve the CLARITY Act?

At the moment, prospects appear stronger than at any previous stage of the legislative process.

Industry observers note several encouraging developments.

First, bipartisan negotiations have continued instead of collapsing.

Second, major crypto companies including Coinbase continue actively lobbying in favor of the legislation.

Third, congressional leadership appears willing to devote floor time to crypto regulation rather than postponing the issue once again.

Reports also suggest Senate leadership has been working toward a possible vote during the current legislative window.

None of this guarantees passage.

Legislation can still be amended, delayed or fail to secure sufficient support during floor consideration.

However, the political environment surrounding crypto regulation looks substantially different from previous years.

Why the Industry Is Watching So Closely

Few pieces of legislation could reshape the U.S. crypto market more dramatically than the CLARITY Act.

For exchanges such as Coinbase, Kraken and others, regulatory certainty would simplify long-term business planning.

For blockchain developers, it could reduce uncertainty surrounding token launches and fundraising.

Institutional investors could also benefit from clearer legal classifications that reduce regulatory ambiguity when evaluating digital asset investments.

Many venture capital firms have argued that uncertainty—not technology—has become the largest obstacle preventing broader blockchain investment within the United States.

If passed, the CLARITY Act could substantially reduce that uncertainty.

Not Everyone Supports the Bill

While much of the crypto industry strongly favors the legislation, opposition remains.

Some critics argue the bill grants excessive flexibility to cryptocurrency companies while weakening the SEC’s enforcement authority.

Others question whether decentralization standards can be measured objectively or whether projects might restructure themselves merely to qualify for more favorable regulatory treatment.

Consumer advocates have also argued that disclosure requirements should be stronger and more closely resemble traditional securities markets.

These concerns explain why negotiations have continued even as supporters express optimism.

The final legislation may differ from previous House versions if additional Senate amendments are adopted.

The Broader Regulatory Picture

The CLARITY Act does not exist in isolation.

It forms part of a broader congressional effort to establish comprehensive digital asset legislation, including rules governing stablecoins, market infrastructure and digital asset oversight.

Rather than regulating crypto through individual enforcement actions, lawmakers increasingly appear interested in creating statutory frameworks similar to those governing traditional financial markets.

That shift reflects the growing size of the digital asset industry.

Bitcoin exchange-traded funds, tokenized assets and increasing institutional participation have transformed cryptocurrency from a niche technology sector into a meaningful component of global finance.

As the industry matures, pressure has grown for Congress—not regulators alone—to define the rules.

What Happens Next

Attention now turns to the Senate.

If leadership brings the CLARITY Act to the floor this week, lawmakers will debate proposed amendments before voting on final passage.

Even if approved by the Senate, differences between House and Senate versions may still require reconciliation before the legislation can reach the president’s desk.

That means the process is not yet complete.

Nevertheless, industry participants increasingly believe crypto regulation has entered its most consequential legislative phase since Bitcoin first emerged more than fifteen years ago.

After years of uncertainty, the United States appears closer than ever to adopting a comprehensive framework governing digital asset markets.

Whether the CLARITY Act ultimately becomes law remains uncertain, but one thing is increasingly clear: Washington is no longer debating whether cryptocurrencies should be regulated. The debate has shifted to how that regulation should be written—and that represents a significant change in itself.

Continue Reading

Cardano

Wanchain’s 515 Million NIGHT Exploit: The Signature Was Valid—The Message Was Not

Avatar photo

Published

on

The most dangerous weakness in a cross-chain bridge is not always a stolen private key, a compromised validator or a broken cryptographic algorithm. Sometimes it is something more mundane: two pieces of software disagreeing about what a signed message actually says.

That appears to be the central failure behind the Wanchain bridge incident involving Cardano, BNB Chain and approximately 515.2 million NIGHT tokens. The tokens were removed from a Wanchain-controlled bridge treasury on Cardano in four transactions, creating an estimated loss of roughly $9 million to $10 million at prices reported around the incident.

NIGHT subsequently fell sharply as a large quantity of previously locked tokens entered circulation and selling pressure spread through Cardano’s decentralized exchanges.

The attack has been described in some headlines as a Cardano hack, a BNB Chain hack or even a breach of the Midnight Network. None of those descriptions is technically accurate based on the information currently available.

Cardano continued processing transactions normally. BNB Chain did not suffer a consensus failure. Midnight’s validators, protocol and core infrastructure were not compromised. The vulnerable component appears to have been Wanchain’s Cardano-side bridge logic—the infrastructure responsible for deciding when tokens locked on Cardano could legitimately be released.

A Bridge Failure Between Two Functioning Blockchains

Wanchain operates cross-chain infrastructure connecting networks that cannot natively verify one another’s state. Its bridge between Cardano and BNB Chain allowed NIGHT holders to move economic value between the two ecosystems.

NIGHT exists as a native asset on Cardano. When users wanted to move it to BNB Chain, the bridge used a conventional lock-and-mint process. Native NIGHT was deposited into a treasury contract on Cardano, while a corresponding bridged representation was created on BNB Chain.

When users moved in the opposite direction, the process was supposed to work in reverse. The bridged tokens on BNB Chain would be burned or otherwise removed from circulation, and Wanchain’s bridge nodes would produce an authorization allowing the corresponding native NIGHT to leave the Cardano treasury.

The bridge therefore depended on a simple economic promise: every bridged NIGHT token circulating on BNB Chain should be backed by NIGHT locked on Cardano.

The attacker did not need to break either blockchain. The target was the mechanism enforcing that promise.

Wanchain confirmed that NIGHT was withdrawn from the bridge contract on Cardano and temporarily made WanBridge unavailable. The company said it was investigating the incident and would provide a transparent update after completing its analysis.

At the time of publication, that full postmortem had not appeared.

The Preliminary Root Cause

Blockchain security company BlockSec has published the most detailed preliminary explanation of the exploit.

Its investigation points to a problem called non-injective signed-message encoding inside Wanchain’s TreasuryCheck validator, a Plutus V2 smart contract deployed on Cardano.

The TreasuryCheck validator had an important job. Before allowing NIGHT to leave the treasury, it needed to verify that the withdrawal had been authorized by Wanchain’s bridge node group.

That authorization took the form of a digital signature over transaction data. In principle, the signature was intended to bind together details such as the source-chain transaction, token information, recipient, amount, fees and other bridge parameters.

The problem was apparently not the signature itself. The signature was cryptographically valid.

The problem was how the contract assembled the information before verifying that signature.

According to BlockSec, the validator combined 14 variable-length fields by placing their raw byte representations directly beside one another. It did not consistently place separators between the fields, nor did it encode the length of each field.

This can make a collection of structured values ambiguous.

Imagine a system that signs two numbers by joining them together. The values “12” and “345” produce the combined message “12345.” But the values “1” and “2345” produce the same combined message.

The individual fields are different, yet the final string is identical.

A cryptographic signature cannot protect information that was ambiguously formatted before it was signed. The signature only proves that someone authorized the resulting bytes. It does not independently know where one field was supposed to end and the next was supposed to begin.

This is why the vulnerability is described as non-injective encoding. Multiple distinct sets of input values can map to the same encoded message.

One Authorization, Two Very Different Withdrawals

BlockSec traced the identifier used in one of the attack transactions to a legitimate transaction on BNB Chain.

That original transaction reportedly authorized the release of approximately 3,110 NIGHT. It appears to have been a normal bridge operation carrying a valid authorization from the bridge’s signing system.

The attacker allegedly rearranged or manipulated the boundaries between the encoded fields while preserving the same final byte sequence. Because the bytes being verified had not changed, the original signature remained valid.

The altered Cardano transaction, however, interpreted those bytes differently.

Instead of releasing roughly 3,110 NIGHT, the TreasuryCheck contract authorized the withdrawal of 203,001,692 NIGHT.

That represents an increase of approximately 65,000 times over the amount associated with the legitimate BNB Chain transaction.

The same general technique appears to have been used across four withdrawals. Together, they removed approximately 515.2 million NIGHT from the treasury over about eight minutes.

This was not a conventional replay attack in which the exact same transaction was simply submitted twice. It was more subtle. The attacker appears to have reused valid signed data while changing its semantic interpretation.

The contract saw a valid signature attached to a withdrawal request that satisfied its programmed checks. What it failed to establish was that the structured withdrawal request meant exactly the same thing that the bridge nodes had intended to authorize.

The Hash Function Was Not Broken

It is important to distinguish this failure from a cryptographic hash collision.

A hash collision occurs when two different inputs produce the same hash output despite being represented as different byte sequences. Finding a practical collision against a modern cryptographic hash function would be a major cryptographic breakthrough.

That is not what appears to have happened here.

In the Wanchain case, the two sets of structured fields could be converted into the same byte sequence before hashing. The hash function then received identical input and naturally generated an identical result.

The attacker did not defeat the hash. The bridge handed the hash function an ambiguous message.

The distinction matters because replacing the hash algorithm would not solve the underlying problem. SHA-3, SHA-256 or another secure function would all return the same output when given the same bytes.

The correct fix is unambiguous serialization.

Every field must have a clearly defined type, order and boundary. Variable-length values should include explicit length prefixes or be encoded through a canonical structured format such as CBOR. Cardano’s serialization tools already provide mechanisms that can represent Plutus data with clear boundaries.

BlockSec specifically noted that using structured serialization before hashing could prevent this form of field-splitting and signature reuse.

Why Cardano Was Not Hacked

The malicious withdrawals were executed on Cardano, and the tokens left a Cardano smart contract. That does not mean the Cardano protocol itself failed.

Cardano correctly executed the validator code deployed by Wanchain. The blockchain reached consensus, checked the transaction according to its rules and recorded the resulting state change.

The fault appears to have existed in the application-level contract logic.

This is comparable to a banking application approving an unauthorized payment because of a bug in its internal authorization system. The underlying operating system and database may be working exactly as designed, but the application has still made a disastrous decision.

The incident also does not currently indicate a general vulnerability in Plutus V2. Other Cardano applications are not automatically exposed simply because they use the same smart-contract platform.

The relevant question is whether any other Wanchain contracts reuse the same encoding pattern. The public Wanchain repository describes similar authorization contracts for fungible-token treasuries, token minting and NFT operations.

Until Wanchain publishes a complete scope assessment, users cannot assume that the risk was limited exclusively to NIGHT.

Why BNB Chain Was Involved

BNB Chain appears in the story because the reused authorization originated from a legitimate bridge transaction there.

The attacker needed authentic signed material. A real BNB Chain bridge transaction provided it.

But there is no evidence that BNB Chain accepted an invalid state transition, suffered a validator compromise or produced fraudulent consensus data. The BNB transaction was apparently legitimate for the relatively small NIGHT amount it represented.

The failure occurred when Wanchain’s Cardano validator interpreted the signed information differently from the system that generated it.

That is one of the fundamental dangers of cross-chain infrastructure. A bridge must translate state between networks with different transaction models, data formats and smart-contract environments.

BNB Chain follows an Ethereum-style account model and executes EVM contracts. Cardano uses an extended unspent transaction output model and Plutus validators. The bridge must preserve the precise meaning of an event while translating it between those architectures.

A signature is only useful when both sides agree on exactly what was signed.

Midnight’s Network and Token Supply Were Not Directly Compromised

The Midnight Foundation said the incident involved third-party bridge operations rather than the Midnight Network itself.

There is currently no indication that an attacker took control of Midnight validators, altered Midnight consensus or discovered a vulnerability in the network’s privacy technology.

The NIGHT token contract was not used to create hundreds of millions of new tokens. The attacker withdrew existing NIGHT that had already been locked in Wanchain’s Cardano treasury.

The distinction is technically important, but economically it offers limited comfort.

Tokens that had been immobilized as backing for bridged NIGHT became available to the attacker. A substantial amount was reportedly moved through Cardano trading venues, contributing to a price decline of more than 30% around the incident.

The total NIGHT supply may not have increased, but the liquid supply available to the market changed abruptly.

That can produce many of the same immediate effects as an unauthorized mint: dilution of available liquidity, collapsing prices and uncertainty about who ultimately bears the loss.

The Under-Collateralization Question

The largest unresolved issue is not simply how many tokens the attacker withdrew. It is what remains backing the bridged NIGHT circulating on BNB Chain.

The Cardano treasury existed to collateralize the cross-chain representation. Removing 515.2 million NIGHT potentially leaves a gap between tokens locked on Cardano and bridged claims outstanding elsewhere.

If the corresponding BNB Chain tokens had already been legitimately burned, part of the withdrawal might represent direct theft without leaving an equal amount of circulating bridged liabilities. But if the attacker used small legitimate burns to authorize massively inflated Cardano withdrawals, the bridge treasury could have lost far more collateral than was removed from circulation on BNB Chain.

That would leave the system under-collateralized.

Wanchain needs to publish a complete reserve reconciliation showing the amount of NIGHT still held on Cardano, the quantity of bridged NIGHT outstanding on BNB Chain and the liabilities associated with pending transactions.

Without those numbers, holders of bridged NIGHT cannot independently determine whether every token remains redeemable.

The response may require Wanchain to replace the missing collateral, negotiate a recovery with the attacker, obtain support from ecosystem partners or establish a claims process.

Simply redeploying the vulnerable contract would prevent further withdrawals. It would not repair the balance sheet created by the exploit.

The Uncomfortable Audit Question

The incident is especially significant because Wanchain’s Cardano bridge had undergone multiple security reviews.

Project Catalyst records show that 250,000 ADA was allocated for a second audit of the bridge. The project marked the external-auditor selection, first code review, second review and final audit as completed. Wanchain’s proposal also stated that the bridge had been audited before its original launch.

An exploit after an audit does not automatically mean the auditors were negligent.

The vulnerable code may have been modified after the review. The NIGHT integration may have introduced new data formats. The deployed bytecode may have differed from the reviewed repository. The audit scope may have excluded off-chain message construction or the exact interaction between BNB Chain and Cardano.

It is also possible that the ambiguous encoding existed in the reviewed code but was not identified.

Only the audit reports, reviewed commit hashes and deployment records can resolve that question.

Wanchain’s postmortem should identify the precise vulnerable code version, when it was deployed, whether it was included in either audit and whether recommended changes were fully implemented.

Anything less would leave the most important governance question unanswered.

What Wanchain Must Fix Before Reopening

A safe restart requires more than removing NIGHT from the bridge interface.

The TreasuryCheck message format must be replaced with canonical serialization that preserves the type and length of every field. The new contract should use domain separation so that a signature created for one contract, network, token or action cannot be accepted in another context.

Bridge authorizations should bind themselves to the source-chain identifier, destination chain, contract version, token policy, exact amount, recipient, nonce and expiry. Every identifier should be consumed only once.

Wanchain must also examine its other Cardano validators for the same concatenation pattern. If TreasuryCheck, MintCheck, NFTTreasuryCheck or related contracts share utility code, the vulnerability may have a wider theoretical scope even when no additional exploitation has been observed.

The bridge node group’s signing software must be reviewed alongside the on-chain contracts. Security depends on both sides producing and interpreting exactly the same canonical message.

Finally, the project needs monitoring capable of stopping anomalous withdrawals. A request to release 203 million NIGHT when the corresponding source-chain event represented approximately 3,110 NIGHT should have triggered an automatic circuit breaker, regardless of whether the signature passed.

Cryptographic authorization should not be the only defense against economically impossible behavior.

A Bridge Can Be Decentralized and Still Fail Centrally

Wanchain describes WanBridge as decentralized and non-custodial because no conventional company-controlled wallet manually approves every transfer. Bridge nodes use distributed signing mechanisms, while smart contracts hold and release assets.

The NIGHT incident shows the limits of those labels.

A bridge contract can be non-custodial from the user’s perspective while still becoming a concentrated pool of collateral. It can use decentralized signers while depending on one shared interpretation of a message format. It can avoid a single private key while retaining a single vulnerable verification path.

Decentralization protects against certain failures. It does not automatically prevent software bugs.

The Wanchain exploit appears to have bypassed a sophisticated signing network without compromising any of its signers. The attacker did not need control of the authorization system because the same authorization could be made to mean two different things.

That is a more troubling failure than a simple key leak. Keys can be rotated. Ambiguous protocol semantics can remain unnoticed for years.

The Preliminary Verdict

The leading explanation for the Wanchain NIGHT exploit is now technically coherent and supported by on-chain analysis, but it remains preliminary until Wanchain publishes its own postmortem.

Approximately 515.2 million NIGHT left the Cardano-side bridge treasury in four rapid withdrawals. At least one transaction appears to have reused a legitimate bridge signature associated with a much smaller BNB Chain transfer.

The suspected root cause was raw concatenation of 14 variable-length fields without sufficient boundaries. That allowed different withdrawal parameters to produce the same signed bytes, enabling a valid signature to authorize a transaction the signers never intended.

Cardano was not compromised. BNB Chain was not compromised. Midnight was not compromised.

The bridge between them was.

That distinction matters for technical accuracy, but it does not reduce the seriousness of the failure. Cross-chain bridges exist to preserve value while translating information between incompatible systems. When the translation layer cannot distinguish a 3,110-token withdrawal from a 203-million-token withdrawal, the entire collateral model collapses.

The next test for Wanchain is no longer whether it can identify the flawed encoding. BlockSec has already presented a credible answer.

The real test is whether Wanchain can account for every missing NIGHT token, restore the bridge’s backing, prove that related contracts are safe and explain how a vulnerability this fundamental survived development, deployment and multiple rounds of auditing.

Continue Reading

Bitcoin

Bitcoin’s BIP-110 Rebellion Is Running Out of Road, but the Fight Over Bitcoin’s Purpose Is Far From Over

Avatar photo

Published

on

Bitcoin’s most important disputes rarely begin with price. They begin with a deceptively simple question about what the network is allowed to become.

BIP-110, a proposal to temporarily restrict the amount and type of non-financial data stored in Bitcoin transactions, has turned that question into the protocol’s most contentious governance fight in years. Supporters argue that images, tokens and other arbitrary data impose permanent costs on node operators while distracting Bitcoin from its monetary mission. Opponents warn that policing transaction content at the consensus level would damage neutrality, restrict future upgrades and risk splitting the network.

As the proposal approaches its activation window, the practical verdict appears increasingly clear. Miner signaling has remained below roughly 1%, major pools have declined to support it and prominent Bitcoin figures including Michael Saylor, Adam Back, Jameson Lopp and David Bailey have publicly opposed the plan.

BIP-110 may be losing the activation battle. The ideological conflict behind it is not going away.

From an OP_RETURN Dispute to a Consensus Fight

The origins of BIP-110 can be traced to a wider argument over Bitcoin Core version 30 and its handling of OP_RETURN, a transaction output commonly used to attach small amounts of data to the blockchain.

Bitcoin Core had historically applied a default relay-policy limit of approximately 80 bytes to OP_RETURN data. Version 30 relaxed that policy substantially, effectively allowing larger data-carrying transactions to move through nodes running the standard configuration.

That change did not alter Bitcoin’s consensus rules. It did not make previously invalid transactions valid. It changed which already-valid transactions Bitcoin Core nodes would normally relay through their mempools.

The distinction between policy and consensus is central to the current controversy.

Policy determines which transactions an individual node chooses to relay or which transactions a miner chooses to include. Different nodes can maintain different policies while still agreeing on the same blockchain.

Consensus determines whether a block is valid. When consensus rules change, nodes enforcing different rules can permanently disagree over which chain represents Bitcoin.

BIP-110 attempts to move the arbitrary-data dispute from the policy layer into consensus. Transactions that are valid under current Bitcoin rules could become invalid to nodes running the proposal.

That escalation is precisely what supporters consider necessary—and what opponents consider dangerous.

What BIP-110 Would Actually Change

Known as the Reduced Data Temporary Softfork, BIP-110 proposes a one-year restriction on several methods used to embed data inside Bitcoin transactions.

The proposal would restore an 83-byte consensus limit for OP_RETURN outputs, restrict many data pushes and witness items larger than 256 bytes, and impose additional limits on certain Taproot structures. It would also temporarily disable several currently unused or rarely used scripting mechanisms that supporters believe can be exploited for data storage.

The proposal is therefore broader than a simple attempt to stop oversized OP_RETURN messages. It affects multiple transaction structures, including some that could become useful for future Bitcoin upgrades or advanced contracting systems.

Coins created before activation would be grandfathered, reducing the risk that existing funds could suddenly become unspendable. The restrictions would automatically expire after approximately one year unless a new proposal extended or replaced them.

Supporters present this temporary design as a controlled intervention rather than a permanent redesign. The network would gain time to reduce abusive data usage, observe the effects and consider a more refined long-term solution.

Critics argue that a temporary consensus rule is still a consensus rule. Even if it expires, it can create incompatible chains, disrupt applications and establish a precedent for invalidating transactions based on how participants interpret their purpose.

The Case for Keeping Bitcoin Focused on Money

The strongest argument for BIP-110 is economic rather than cultural.

When a miner includes a data-heavy transaction, the miner receives a fee once. Every full node may then be required to download, validate and store information associated with that transaction for years.

BIP-110 supporters describe this as an externality. The person embedding the data pays the miner, but does not fully compensate the thousands of node operators carrying the long-term infrastructure burden.

They also reject the idea that the fee market automatically solves the problem. A market for permanent, globally replicated data storage is not necessarily compatible with a market designed to prioritize financial transactions. Wealthy inscription users can compete with ordinary payments for limited block space, potentially raising fees for people trying to use Bitcoin as money.

The proposal’s authors argue that Bitcoin should not become a general-purpose database. Images, documents and token metadata can be stored through specialized systems such as IPFS, BitTorrent, Nostr or conventional cloud infrastructure. Bitcoin’s scarce base-layer capacity, in their view, should remain focused on transferring and securing value.

Luke Dashjr, a longtime Bitcoin developer and a leading supporter of restrictive transaction policies, has defended this monetary-first interpretation. Ocean, the mining pool associated with Dashjr, produced some of the earliest blocks signaling support for BIP-110.

For its supporters, the proposal is not censorship. It is resource management.

Why Michael Saylor Opposes BIP-110

Michael Saylor’s intervention significantly raised the profile of the dispute.

The Strategy executive chairman acknowledged that many Bitcoiners he respects support the proposal and that concerns about arbitrary data are legitimate. His objection is directed at the proposed cure.

Saylor argues that BIP-110 transforms a disagreement about relay policy, mining policy and market incentives into a dispute over transaction validity. In his view, consensus should not be used to settle a cultural argument about which fee-paying transactions are desirable.

He escalated his opposition by publishing an extensive list of 110 objections to the proposal. His concerns include the complexity of introducing seven new restrictions, the potential effect on future scripting upgrades, the possibility of incompatible implementations and the danger of attempting activation without overwhelming agreement.

Saylor also objected to the proposal’s 55% miner-signaling threshold. Conventional Bitcoin soft-fork deployments have often targeted much higher levels of readiness because even a technically backward-compatible change can become dangerous when important participants do not enforce the same rules.

His broader position is that Bitcoin’s resistance to change is a security feature. He described hard consensus as the network’s “immune system,” arguing that controversial ideas should fail before an attempted improvement causes greater damage than the original problem.

Saylor’s influence does not give him formal authority over Bitcoin. There is no board of directors that can approve or reject a protocol change. Nevertheless, his public opposition matters because Strategy is one of the largest institutional Bitcoin holders and Saylor has become a central voice in corporate Bitcoin adoption.

His message to institutions is straightforward: Bitcoin’s credibility depends on predictable rules, not frequent intervention.

Adam Back, Jameson Lopp and David Bailey Join the Opposition

Saylor is not alone.

Blockstream co-founder Adam Back has said the network has effectively and “robustly rejected” BIP-110. He argues that participants who want stricter rules are free to operate their own fork, but should not expect the wider Bitcoin economy to recognize it as the primary network.

Back’s position reflects an important distinction in Bitcoin governance. Anyone can release software with new rules. The difficult part is persuading miners, exchanges, wallets, merchants and holders to accept the resulting chain as Bitcoin.

Security engineer Jameson Lopp has also criticized BIP-110 as technically risky and philosophically inconsistent with censorship resistance. Lopp argues that Bitcoin’s value comes partly from users being able to predict that valid transactions will remain valid without receiving social approval from influential groups.

Restrictions designed to target inscriptions could also affect sophisticated scripts that were never intended for data storage. Unknown applications are particularly difficult to protect because developers cannot test compatibility with software and transaction structures they do not know exist.

David Bailey, the chairman and chief executive of Bitcoin treasury company Nakamoto, went further by describing the campaign as a “hostile takeover attempt.” He portrayed its lack of miner support as evidence that Bitcoin’s decentralized governance successfully resisted pressure from a motivated minority.

The language has become inflammatory on both sides. Yet beneath the rhetoric is a legitimate disagreement over whether Bitcoin should defend neutrality by refusing to classify transaction content—or defend decentralization by preventing users from forcing unwanted data onto node operators.

Miner Support Has Barely Materialized

Despite months of campaigning, BIP-110 has failed to attract meaningful mining support.

Ocean has signaled for the proposal, but the largest mining pools have not followed. Across monitored signaling periods, support has remained below approximately 1%, far from the proposal’s 55% threshold.

Node adoption has also remained limited and is concentrated largely among users of Bitcoin Knots, an alternative node implementation that offers more restrictive filtering controls than Bitcoin Core.

These figures do not constitute a perfectly democratic vote. One visible node does not necessarily represent one person, one company or one unit of economic influence. Nodes can be hidden, duplicated or temporarily connected. Miner signaling is also usually controlled by pool operators rather than every individual machine contributing computing power.

Nevertheless, support this low sends a clear coordination signal. The major infrastructure participants are not preparing to enforce BIP-110.

Calling the proposal officially defeated would still be premature. Its activation mechanism contains a mandatory-signaling phase intended to force a decision before the deadline. Nodes running the BIP-110 software would begin rejecting blocks that fail to signal during that period.

With broad support, such a mechanism could pressure miners to coordinate around the new rules.

Without broad support, the same mechanism could isolate BIP-110 nodes on a minority chain.

What Bitcoin Miners Actually Do

The debate has also exposed confusion about the role of miners in Bitcoin governance.

Miners collect transactions, arrange them into candidate blocks and perform the proof-of-work calculations required to add those blocks to the blockchain. They usually prioritize transactions offering the most attractive fees, although pools can apply additional filtering policies.

Mining pools can also place signals inside block-version fields to indicate readiness for proposed rule changes. BIP-110 uses one of these version bits.

However, miners do not possess unilateral power to rewrite Bitcoin’s rules.

Full nodes independently validate every block. A miner that creates a block violating the rules enforced by the wider network will see that block rejected, regardless of how much electricity was used to produce it.

At the same time, full nodes cannot force miners to create blocks under new rules merely by installing different software. When only a small minority enforces stricter conditions, those nodes may reject the dominant chain while the rest of the economy continues without them.

This creates a balance among miners, developers, node operators and economic users.

Developers propose and publish code. Nodes choose which code to run. Miners decide which valid transactions to include and which chain to extend. Exchanges, businesses and holders determine which chain has economic value.

No group controls the system independently. Successful changes usually require coordination across several of them.

Miner signaling is therefore not a binding election. It is a public indication of readiness and an important measure of whether a rule change can activate without operational chaos.

The 55% Threshold Is the Most Dangerous Number in the Debate

BIP-110 requires 1,109 signaling blocks within a 2,016-block adjustment period, equivalent to approximately 55%.

Supporters justify the lower-than-usual threshold by noting that the proposal is temporary and addresses what they regard as an urgent threat. Waiting for near-universal agreement, they argue, would allow arbitrary-data ecosystems to become more deeply embedded and politically difficult to remove.

Opponents see the threshold as evidence that the proposal lacks the caution required for consensus changes.

A rule supported by 55% of recent blocks could still leave a large minority of miners producing blocks rejected by upgraded nodes. Exchanges could suspend deposits, wallets might follow different chains and users could face uncertainty over which transactions were final.

Bitcoin has survived previous protocol conflicts, including the block-size war and the activation of Segregated Witness. The lesson many participants drew from those episodes was not that contentious forks are harmless, but that changes require strong coordination among users, miners and businesses.

BIP-110 has not demonstrated anything close to that alignment.

What Happens Next

The proposal’s mandatory-signaling period is scheduled around blocks 961,632 through 963,647. It is designed to produce lock-in by block 963,648, with enforcement of the new transaction rules expected around block 965,664.

Under the BIP-110 schedule, the restrictions would then remain active for 52,416 blocks, approximately one year.

The code can reach those heights regardless of political support. The crucial question is which chain the economy will follow.

With miner signaling still negligible, the most likely outcome is that the dominant Bitcoin chain continues under existing consensus rules. Nodes enforcing BIP-110 could then separate from it if they reject non-signaling blocks or blocks containing transactions prohibited by the proposal.

That would not automatically create a valuable competitor. A minority chain needs mining power, liquidity, exchange support, wallet infrastructure and users willing to assign value to it.

Without those elements, it becomes an ideological fork with little economic activity.

A dramatic shift in support remains technically possible, but the window for such a reversal is narrowing. Major mining pools would need to change position rapidly, and economic participants would need to demonstrate that the signaling represented more than temporary coordination.

Bitcoin’s Governance Is the Real Story

BIP-110 is often described as a battle over spam, Ordinals or images stored on the blockchain. Those are only the visible triggers.

The real dispute concerns who gets to define legitimate Bitcoin use.

Supporters believe Bitcoin must actively defend its monetary purpose or risk becoming an expensive permanent storage system for applications that could operate elsewhere. Opponents believe Bitcoin protects its monetary value by refusing to let developers or social majorities classify valid transactions according to subjective intent.

Both sides claim to be defending decentralization. They disagree on what decentralization requires.

For BIP-110, the immediate numbers are unforgiving. Miner support remains negligible, node adoption is limited and several influential figures have publicly rejected the proposal. Unless that changes rapidly, the attempt to restrict arbitrary data through consensus is likely to end in failure or a small minority fork.

But the pressure that produced BIP-110 remains. Bitcoin will continue attracting inscriptions, tokens, experimental protocols and uses its earliest supporters never anticipated.

The network may reject this particular solution. It has not resolved the underlying question.

Bitcoin still has to decide whether neutrality means accepting every valid fee-paying transaction—or whether preserving neutral money sometimes requires saying no to everything else.

Continue Reading

Trending