The reentrancy bug was discovered by Asymmetric Research, a core contributor to the Wormhole interoperability protocol.