Charles Hoskinson Links Wanchain Cardano Bridge Hack To AI Threats

$10 Million Wanchain Bridge Exploit Shakes Cardano Ecosystem

Cardano co-founder Charles Hoskinson (@IOHK_Charles) has used a major bridge exploit to make a pointed argument about the future of crypto security. Speaking publicly after the attack, he said the incident illustrated an accelerating threat landscape that legacy infrastructure is no longer equipped to handle.

On July 21, 2026, Wanchain's bridge connecting Cardano to BNB Chain was exploited, resulting in the theft of approximately 515.2 million $NIGHT tokens worth around $10 million from the bridge treasury. The incident unfolded in just four rapid transactions over an eight-minute window.

According to blockchain security firm BlockSec, a single valid signature was used to authorize a payout roughly 65,000 times larger than Wanchain had approved. The bridge had built its signed message by raw-concatenating 14 variable-length redeemer fields without delimiters or length prefixes, allowing different field combinations to collapse to the same byte string and hash. The attacker sold roughly 300 million $NIGHT on exchanges, pushing the token down more than 30% to a record low near $0.016.

The Midnight Foundation confirmed that its protocol, validators, consensus system and core infrastructure continued operating normally throughout the incident.

Hoskinson Points to Zero-Knowledge and Privacy Tech as the Fix

Hoskinson argued that AI-powered attacks are accelerating and that conventional bridge designs cannot keep pace. He explained why bridge hacks are, in his view, inevitable without zero-knowledge infrastructure, and outlined what wallet insurance, selective identity disclosure, and privacy technology like Midnight would mean for an industry that currently leaves victims with no recourse.

Midnight is a privacy-focused layer-1 blockchain built within the Cardano ecosystem. It uses a hybrid model and selective disclosure so users and businesses can prove facts about themselves without revealing underlying personal data. The project operates as a privacy-focused Cardano partner chain with a dual-token economic model built around $NIGHT and DUST. It launched its mainnet in March 2026.

The wider context is hard to ignore. High-profile bridge cases including Ronin ($624 million) and Wormhole ($326 million), alongside more recent 2026 incidents, underscore how bridges often become the weakest link in DeFi due to complex message verification, validator dependencies, and economic incentives for attackers. Wanchain had operated across dozens of blockchains for over eight years without a major incident, making the breach a notable exception to its track record.

Hoskinson's comments add to a broader push by the Cardano ecosystem to position zero-knowledge and privacy infrastructure not merely as a feature but as a security necessity. Whether the industry moves fast enough to act on that argument remains to be seen.

Sources
Crypto Times: Wanchain Cardano Bridge Exploited, Hackers Stole $10M in NIGHT Tokens
CoinLaw: Wanchain's Cardano Bridge Hack Drains 515 Million NIGHT
CoinDesk: Charles Hoskinson's $200M Midnight Bet Goes Live