On July 20, 2026, between 14:46 and 14:55 UTC, a Wanchain bridge contract transferred 515.2 million NIGHT tokens in four separate transactions, targeting only NIGHT despite holding other assets including Mynth, XER, and WMT. The selective extraction sent Midnight's native token into a price freefall of nearly 50% from its intraday high. The Midnight Foundation subsequently confirmed that the Midnight blockchain itself was not compromised — the incident was isolated to the third-party Wanchain Cardano-BNB bridge, a cross-chain infrastructure component that has historically been among the most vulnerable points in decentralized networks.
The Wanchain bridge contract at the center of the event had been funded in December 2025 and held a mix of assets — Mynth, XER, WMT, and NIGHT. On the afternoon of July 20, 2026, only NIGHT tokens moved. Every other asset remained untouched.
Cardano community investigator UTxOMaestro reported via an X thread that the 515.2 million NIGHT tokens arrived in four distinct transfers: 203.0 million NIGHT, followed by 129.6 million, then 120.4 million, and finally 62.1 million — all landing in the same receiving wallet between 14:46 UTC and 14:55 UTC. The precision of the operation — leaving Mynth, XER, and WMT completely untouched while systematically extracting all available NIGHT — pointed toward someone who knew exactly what they wanted and had the access to take it.
Two wallets — referred to by investigators as W1 and W2 — appear to have been central to what happened next, and on-chain evidence suggests both were likely controlled by the same entity. W1 sent 1,000 ADA to W2 before transferring 200.06 million NIGHT across. W2 later returned 100.31 million NIGHT along with ADA and USDCx back to W1.
W1 began selling NIGHT across decentralized exchanges almost immediately after receiving the tokens. Investigators confirmed specific swap transactions: 217.7 million NIGHT exchanged for approximately 24.02 million ADA, and a separate swap of 87.88 million NIGHT for roughly 1.44 million USDCx. In total, W1 sold around 300 million NIGHT — enough to generate an initial price decline of nearly 50%.
W2 took a different approach. Rather than dumping its entire 200 million NIGHT allocation, it sold only a small portion. W2 deposited 68.27 million NIGHT into Liqwid, a Cardano-based lending protocol, using those tokens as collateral to borrow roughly 4.364 million ADA — which was then transferred back to W1. Roughly 200 million NIGHT remains largely unsold.
The Midnight Foundation stated that the Midnight blockchain was not breached. The foundation confirmed that the incident was isolated to the Wanchain Cardano-BNB bridge — a third-party piece of cross-chain infrastructure, not native Midnight protocol code.
According to the foundation, Midnight's validator network, consensus mechanism, and core protocol infrastructure all continued to operate normally throughout the event. There was no evidence that the Midnight network's security or operational integrity had been affected.
The NIGHT token climbed to an intraday high of $0.02689 on July 20, 2026, before the sell-off hit. As the wave of on-chain selling intensified, it plunged to a low of $0.01582 — a drop of more than 41% from peak to trough within the same session.
By press time, NIGHT was trading at approximately $0.0174, down 35.12% over the 24-hour period. Daily trading volume surged 798% to $125.96 million. With a significant portion of the 200 million NIGHT held by W2 still undeployed — and only a fraction pledged as collateral on Liqwid — the market faces the ongoing possibility of additional selling.
What triggered the 515.2 million NIGHT token transfer on July 20, 2026?
A Wanchain bridge contract transferred 515.2 million NIGHT tokens in four transactions over eight minutes between 14:46 and 14:55 UTC, specifically targeting NIGHT despite the contract also holding other assets including Mynth, XER, and WMT. The motives behind the transfer remain unconfirmed.
Did the Midnight blockchain suffer a security breach in this event?
No. The Midnight Foundation confirmed that the Midnight blockchain was not compromised. The incident was isolated to the Wanchain Cardano-BNB bridge, a third-party cross-chain infrastructure component. Midnight's core protocol, validator network, and consensus mechanism continued to operate normally.
How did wallet W2 use the NIGHT tokens it received?
Rather than selling all tokens outright, wallet W2 deposited 68.27 million NIGHT as collateral on the Liqwid lending protocol and borrowed approximately 4.364 million ADA against those holdings, which were then transferred back to wallet W1. The majority of W2's 200 million NIGHT position remained unsold at the time of reporting.
Related News
Zilliqa Confirms ZIL Token Theft from Exchange Partner Cold Wallet
Binance and Bybit Record $2.3B Stablecoin Outflows Over 30 Days
Allbridge Core Pauses Protocol After $1.65M Flash Loan Exploit
Allbridge Core suffered a flash loan and stablecoin pool exchange rate manipulation attack, resulting in losses exceeding $1.1 million