BlockchainJuly 21, 2026·5 min read
A 290 million token dump from a Cardano-to-BNB cross-chain bridge pushed NIGHT, the privacy token for Midnight network, down 43% to an all-time low of $0.01524, exposing fresh vulnerabilities in bridge infrastructure that institutional traders and custody providers have long flagged as a systemic risk in multi-chain settlement.
- 290 million NIGHT tokens sold across decentralized exchanges Monday, comprising roughly 2% of total supply withdrawn from Wanchain bridge.
- NIGHT collapsed from $0.026 pre-dump to $0.01524 all-time low, erasing all prior-year gains and sitting 27% down over 24 hours.
- Midnight Foundation confirmed protocol and validator network operated normally, isolating the failure to Wanchain’s cross-chain bridge architecture, not Midnight itself.
NIGHT, the native token powering Cardano’s Midnight privacy-focused network, experienced a sharp 43% intraday collapse on Monday, triggering initial speculation of a protocol breach before on-chain analysis and official statements pinpointed a cross-chain bridge malfunction.
Between 14:46 and 14:55 UTC, approximately 515 million NIGHT tokens were withdrawn from a contract serving as the Cardano-side lock address for Wanchain’s bridge to BNB Chain, which backs wrapped NIGHT trading on the latter blockchain.
Of those withdrawn tokens, roughly 290 million were liquidated across decentralized exchanges, sending the price from a pre-incident $0.026 to an all-time low of $0.01524, while a further 200 million were transferred to an external wallet, creating what researchers described as a substantial unsold overhang.
The incident exposed the operational fragility of cross-chain bridge infrastructure at a moment when institutional crypto investors have grown increasingly skeptical of multi-chain settlement mechanisms.
Wanchain Bridge Failure Isolated to Single Component, Midnight Protocol Unaffected
Independent on-chain researcher Paul flagged the token movement within minutes of its occurrence and published preliminary findings indicating that the withdrawal targeted only the Wanchain bridge contract, leaving other assets held in that same address, including Mynth, XER, and WMT, completely untouched.
This surgical precision suggested a targeted rather than catastrophic failure, a distinction that proved critical in reassuring the market that the underlying Midnight network remained operational.
Paul’s analysis also confirmed that the total NIGHT supply remained unchanged, ruling out unauthorized token minting and narrowing the scope of the incident to custody and cross-chain mechanics rather than protocol consensus or cryptography.
The Midnight Foundation responded within hours of the discovery, publishing a community statement on X that acknowledged the Wanchain bridge incident while explicitly stating that the Midnight network itself, including its protocol, validator network, consensus mechanism, and core infrastructure, continued to operate normally.
This distinction between bridge failure and protocol failure proved reassuring to developers and node operators but underscored a persistent architectural weakness in crypto infrastructure: bridges frequently operate as separate trust systems layered atop otherwise secure blockchains.
The Foundation also issued warnings against phishing attempts and urged users to rely only on official communications during the investigation, a standard precaution when market volatility and uncertainty create openings for social engineering attacks.
Cardano co-founder Charles Hoskinson weighed in via social media, noting that an automated alert on his mobile device had flagged NIGHT’s abnormal price action, prompting informal coordination between the Midnight Foundation and other stakeholders to track the incident.
Hoskinson identified three critical points: Midnight’s own smart contracts executed without interruption; the failure originated in one of four components within Wanchain’s bridge architecture; and that the incident exposed the need for heightened vigilance as AI tools accelerate the discovery of such flaws.
Cross-Chain Bridge Risk Emerges as Persistent Institutional Concern Amid Market Recovery
The NIGHT incident reignites a longstanding debate among institutional crypto investors and custody providers about the security model of cross-chain bridges. Bridges operate by locking assets on one blockchain and issuing wrapped representations on another, a design that introduces additional trust assumptions beyond the source and destination chains themselves.
Each bridge operator and each underlying smart contract becomes a potential point of failure, and the Wanchain event demonstrates that even contracts held for two years, suggesting mature vetting, can harbor vulnerabilities that critical infrastructure tools can rapidly exploit.
For custody and settlement infrastructure providers serving institutional clients, the incident reinforces the case for on-chain settlement models that minimize bridge dependencies or require multiple attestation layers.
NIGHT’s recovery pattern provided some market relief: within hours of the initial $0.01524 floor, the token pulled back to trade 28% above that low, though it remained down 27% over the 24-hour period and had erased all gains accumulated over the prior year.
The token also sat approximately 34% below its level one week prior, a drawdown that reflected both the immediate forced selling and lingering confidence erosion.
Institutional investors familiar with bridge risk likely recognized the architecture failure as a contained incident, Midnight’s protocol remained intact, and only bridge-wrapped tokens were affected, but the speed and scale of the liquidation highlighted how quickly cross-chain liquidity can evaporate under stress.
Hoskinson’s observation that bridge infrastructure represents “one of the weakest points in crypto because it depends on trust” captures the structural problem: bridges aggregate counterparty risk across multiple operators and code layers, whereas native blockchain settlement depends on cryptographic consensus.
As crypto markets mature and institutional participation expands, the tolerance for bridge-mediated settlement on critical paths has declined, pushing development teams toward either shorter-duration bridge usage or architectural redesigns that reduce trust assumptions.
Midnight Foundation Investigation and Wanchain Remediation Still Underway
At the time of publication, the Midnight Foundation and Wanchain were still investigating the specific technical vector that enabled the token withdrawal.
Early analysis suggested the issue lay in one of Wanchain’s four bridge components, but the precise failure mechanism, whether a bug in contract logic, a compromised key, an operator error, or a logic flaw in the lock mechanism, remained under examination.
This diagnostic phase is critical for institutional confidence: a bug that affects smart contract logic poses different risks than a key management failure, which poses different risks again than a design flaw in the bridge protocol itself.
The timing of Hoskinson’s reference to AI-accelerated vulnerability discovery introduced an additional dimension: the incident may not have resulted from manual exploit or insider action, but rather from automated tooling identifying and executing against a known but unpatched flaw.
If confirmed, this would represent the first major institutional-scale incident where AI systems autonomously discovered and exploited a blockchain security vulnerability in real time. The implication extends beyond Wanchain: every bridge system, DEX, and lending protocol suddenly faces pressure to audit for vulnerabilities that AI tools might discover before human researchers.
The Midnight Foundation and Wanchain have not yet published a detailed technical post-mortem, and no timeline for full findings has been announced. Institutional investors holding NIGHT or considering exposure to Midnight-native applications should await the forensic results and any published remediation steps before reassessing bridge risk. Equally important will be Wanchain’s statement on whether the incident affected other asset pairs on the same bridge infrastructure, the selective impact on NIGHT suggests isolation, but confirmation across all four bridge components and all locked assets would be essential for custody and settlement providers to clear the infrastructure for continued use.
Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.
Subscribe
