Wormhole (W): how it works, supply and reviews

In short

Type: Cross-chain message-passing protocol; not itself a blockchain
Maximum supply: 10 billion W; 1.8 billion circulating at launch, 82% initially locked and unlocking over four years
Risks and caveats: Message validity rests on 13 of 19 Guardian signatures; on delegated chains, observation depends on a smaller subset of Guardians.
Checked: 31 October 2026

Visitor ratings: do you like Wormhole?

Key facts

Ticker: W
Official site: wormhole.com

Key facts checked on 31 October 2026 against official sources.

What is Wormhole

Wormhole is a cross-chain messaging protocol: a network of 19 Guardian validators observes connected blockchains and signs messages (VAAs) that contracts on other chains can verify. It is used to move tokens, data and governance actions between 45+ blockchains; W is its governance token.

Network and consensus

Network and consensus — Wormhole
Parameter	Details
Type	Cross-chain message-passing protocol; not itself a blockchain
Consensus	19 Guardian nodes; a message is valid when a supermajority (13 of 19) signs it
Validators	The Guardian set is made up of 19 validator companies
Connected chains	45+ blockchains
Launched	2020, with a token bridge between Solana and Ethereum

Supply and issuance

Supply and issuance — Wormhole
Parameter	Details
Maximum supply	10 billion W; 1.8 billion circulating at launch, 82% initially locked and unlocking over four years
Initial distribution	Six categories: Guardian Nodes, Community & Launch, Core Contributors, Ecosystem & Incubation, Strategic Network Participants, Foundation Treasury
Airdrop	6.75% of supply (674.8 million W) went to 400,000+ wallets in the launch airdrop

What W is used for

Governance: W holders delegate and vote on Wormhole governance proposals through MultiGov
W is natively multichain: an SPL token on Solana and an ERC-20 on Ethereum, Arbitrum, Optimism and Base via Native Token Transfers

Who develops and governs Wormhole

Foundation: Wormhole Foundation supports the ecosystem with grants, research and ecosystem programs
Developer: Developed by several teams, including Wormhole Foundation, Wormhole Labs, xLabs and Asymmetric Research
Founders: Dan Reecer and Robinson Burkey are named as Wormhole Foundation co-founders
Protocol governance: Contract upgrades require a two-thirds supermajority of Guardians
Token governance: W holders vote through MultiGov via the Tally governance portal; the Foundation administers grants manually as there is no on-chain treasury
Open source: The governance system and core contracts are open source (GitHub: wormhole-foundation)

History

History — Wormhole
Date	Event
2020	Wormhole launches a token bridge between Solana and Ethereum with an initial set of 19 Guardians.
2 February 2022	An attacker exploits a signature verification bug in the Solana-side contract and mints 120,000 unbacked wrapped ETH; Jump Crypto recapitalises the contract and the network is back online on 3 February 2022.
3 April 2024	The W token launches as a Solana SPL token.
February 2025	Wormhole Settlement, a suite of intents protocols for fast cross-chain transfers, launches.
30 June 2026	The Portal Legacy interface (legacy.portalbridge.com) is retired and redirects to the main Portal Bridge site.

Security and audits

On 2 February 2022 an attacker used a missing account check in the Solana contract's signature verification to mint 120,000 unbacked wrapped ETH and bridge 93,750 to Ethereum; the bug was patched, Jump Crypto replenished 120,000 ETH and the network was back online after about 16 hours.
Wormhole reports 29 completed third-party audits; reports are published on GitHub, from firms including Neodyme (January 2022), Kudelski (2022), Trail of Bits (September 2022, April 2023), CertiK (March 2023), Zellic, Cyfrin and OtterSec.
Guardians run a Governor that delays suspicious transfers and a Global Accountant that enforces the total supply of Wormhole assets across chains.
A bug bounty on Immunefi offers up to $2.5 million.

Security incidents

Security incidents — Wormhole
Date	What happened	Source
2 February 2022	Bridge exploit: Wormhole's incident report says that on 2 February 2022 an attacker exploited a signature verification vulnerability in the Wormhole network to mint 120k Wormhole-wrapped Ether on Solana that was not backed by Ether deposits, and bridged 93,750 of these tokens to Ethereum. Node operators paused message relaying and the contract was upgraded; the network was back online at 13:29 UTC on 3 February 2022, about 16 hours in total. Funds returned: The report says Jump Crypto recapitalized the contract so that all Wormhole-wrapped Ether is fully backed; it does not say the attacker returned funds.	wormholecrypto.medium.com

Risks and caveats

Message validity rests on 13 of 19 Guardian signatures; on delegated chains, observation depends on a smaller subset of Guardians.
In February 2022 a contract bug allowed 120,000 unbacked wrapped ETH to be minted; losses were covered by Jump Crypto, not by users.
Most of the 10 billion W supply was locked at launch and unlocks over four years.
The official W Dashboard shows new W staking as disabled; existing allocations can still be unstaked.

Questions and answers

What is Wormhole?

Wormhole is a cross-chain messaging protocol in which 19 Guardian validators sign messages that let tokens, data and governance actions move between 45+ blockchains.

What is the W token?

W is Wormhole's governance token, launched on 3 April 2024 as a Solana SPL token and also available as an ERC-20 on several EVM chains.

What is the supply of W?

W has a supply of 10 billion tokens; 1.8 billion circulated at launch and 82% was locked, unlocking over four years.

Was Wormhole hacked?

Yes. On 2 February 2022 an attacker exploited a signature verification bug on Solana to mint 120,000 unbacked wrapped ETH; the bug was fixed and Jump Crypto restored the full collateral.

How is Wormhole secured?

A message is valid when 13 of 19 Guardians sign it; the protocol also uses a Governor to delay suspicious transfers, 29+ published third-party audits and an Immunefi bug bounty.

Sources

How voting works

Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.

Page updated: 2026-10-31