Meter Network Exploited on BNB Chain: $300,000 in Unbacked MTRG Minted

The Meter network, a decentralized infrastructure provider, is currently facing a coordinated security breach on the BNB Chain. According to real-time monitoring data from cybersecurity firm Blockaid, an unidentified attacker has successfully exploited the Meter Passport bridge to mint unauthorized assets. The exploit has resulted in the creation of approximately 300,000 units of unbacked wrapped MTRG (wMTRG), which the perpetrator has already begun liquidating through decentralized finance (DeFi) protocols.

Mechanism of the Meter Passport Exploit

The security incident centers on the Meter Passport, a cross-chain bridging solution designed to facilitate asset transfers between different blockchain environments. Technical analysis indicates that the attacker bypassed standard collateralization requirements to trigger two significant minting transactions on the BNB Chain.

• The exploit involves the unauthorized generation of wrapped MTRG tokens.
• Initial reports confirm that at least $300,000 worth of tokens were minted without corresponding backing.
• The attacker utilized PancakeSwap, a leading automated market maker (AMM) on BNB Chain, to swap the fraudulent tokens for other liquid assets.

Blockchain security experts warn that the attack is classified as "ongoing", meaning the vulnerability may still be active as developers work to patch the underlying smart contract flaw.

Market Impact and Response

The immediate influx of unbacked tokens into the PancakeSwap liquidity pools has placed significant downward pressure on the price of wMTRG. By selling the minted tokens directly into the market, the attacker effectively drains liquidity from honest providers.

The attacker is using Meter Passport to mint a large amount of wrapped MTRG and has sold some tokens on PancakeSwap. Currently, approximately.3 million in unbacked wrapped MTRG has been minted... and the attack is ongoing.

This incident highlights the persistent risks associated with cross-chain bridges, which remain a primary target for sophisticated exploits in the decentralized ecosystem. Users are advised to exercise caution when interacting with the Meter bridge until an official post-mortem report is released and the vulnerability is confirmed to be mitigated.

The Meter team has not yet issued a definitive statement regarding the total loss or the status of a potential recovery plan for affected liquidity providers. Investors and participants in the MTRG ecosystem should monitor on-chain movements as the situation develops. This breach serves as a stark reminder of the technical complexities involved in maintaining secure interoperability between the Ethereum Virtual Machine (EVM) compatible networks and the BNB Chain.