"Preliminary analysis from CertiK shows that the attacker exploited a vulnerability on the solana side of the Wormhole bridge to create 120,000 so-called “wrapped” ethereum tokens for themselves. (Wrapped etherum tokens are pegged to the value of the original coin but are interoperable with other blockchains.) It appears that they then used these tokens to claim ethereum that was held on the ethereum side of the bridge.
Prior to the exploit, the bridge held a 1:1 ratio of ethereum to wrapped ethereum on the solana blockchain, “acting essentially as an escrow service,” according to CertiK.
“This exploit breaks the 1:1 peg, as there is now at least 93,750 less ETH held as collateral,” continued the report."