VerusCoin Ethereum Bridge Loses $7.54 Million In Second Hack Within Two Months
An attacker exploited a vulnerability in the VerusCoin Ethereum bridge to drain approximately $7.54 million from bridge reserves. Security firm Blockaid reported the breach utilized the bridge’s import path to trigger unbacked Ethereum-side payouts of ETH, USDC, USDT, tBTC, EURC, MKR and scrvUSD.
The stolen assets were converted into 3,916 ETH and deposited into Tornado Cash. The incident marks the second successful hack of the bridge in two months, following an $11.5 million breach in May. While the same bridge contract and vulnerability class were targeted, Blockaid noted the latest attack was executed by a different wallet using a new transaction path.
From the sources (12 posts)
@blockaid_🚨 Blockaid detected a @VerusCoin Ethereum Bridge exploit on Ethereum. An attacker used the bridge import path to trigger unbacked Ethereum-side payouts, draining ~$7.54M in ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from bridge reserves.
@officer_secretAnother one. There is an ongoing @VerusCoin Ethereum Bridge exploit on Ethereum. An attacker used the bridge import path to trigger unbacked Ethereum-side payouts, draining ~$7.54M in ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from brid
@certikalert#CertiKInsight 🚨 We have seen an exploit on @VerusCoin Ethereum bridge, from which ~$7.53M was withdrawn to 0xCFd0A20703cD11E0b9f665e1C3F1Ef989C142D54. The bridge may have failed to check that Verus side inputs back the amounts paid, as
@tayvano_May 17: Verus Bridge hacked for 5402.4 ETH. May 21: The attacker returned 4052.4 ETH. (25% bounty, retards) July 8: Verus Bridge put the money back in the Verus Bridge.
@lookonchainIt appears the @VerusCoin Ethereum bridge was exploited for $7.55M. The exploiter swapped all the stolen funds for 3,916 $ETH($7.52M) and deposited them into #TornadoCash for laundering.
@cointelegraph🚨 ALERT: Another VerusCoin Ethereum Bridge exploit drains ~$7.54M via unbacked payouts, matching the same bridge, entry path, and bug class as May's incident, per Blockaid. However, it's a new transaction with a different attacker wallet.
@peckshieldalert#PeckShieldAlert @VerusCoin: Ethereum Bridge has been exploited for ~$7.5M. The exploiter has started laundering the stolen funds through #Tornadocash
@cyversalerts🚨ALERT🚨Our system has detected a suspicious transaction involving the @VerusCoin Ethereum Bridge with an estimated loss of $7.54M. The attacker exploited the bridge's import mechanism and drained $ETH, $MKR, $tBTC, $EURC, $USDT, $MKR, $USD
@wublockchainVerus–Ethereum Bridge Suffers Second Exploit in Two Months, $7.54M Drained Blockaid detected a new exploit targeting the Verus–Ethereum Bridge, with an attacker abusing the bridge’s import path to trigger unbacked Ethereum-side payouts and
@theblockcoNEW: Verus Ethereum Bridge loses roughly $7.54M in second exploit within two months, according to Blockaid. The attacker drained ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from bridge reserves.
@slowmist_team🚨 SlowMist TI Alert 🚨 💸 @VerusCoin Loss: ~$7.5M ⚠️ Unlike the prior 0x6990…b321 exploit, which decoupled the validated proof from the executed transfer payload, this attack hash-bound the transfers to the CCE but failed to validate the CC
@certikalert3/ The stolen funds have been swapped for 3916.1 ETH and deposited into Tornado Cash.