WHBAR contract security advisory
Accounts that use the WHBAR contract directly and meet the following risk conditions expose themselves to loss of funds. The vulnerability described in this notice has existed since a 2023 network update. For funds to be at risk, specific conditions must exist:- An account has an open WHBAR allowance granted outside of an atomic transaction.
- The account is actively holding WHBAR tokens.
- No protective mechanisms (like those used by SaucerSwap or WhbarHelper contracts) are in place.
Next steps
Wrap HBAR for WHBAR
Deposit HBAR and receive WHBAR at 1:1.
Unwrap WHBAR for HBAR
Withdraw WHBAR back to native HBAR.
Contract deployments
WHBAR and WhbarHelper IDs for mainnet and testnet.