Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnAISquareMore
New Verus-Ethereum bridge attack drains $7.5 million through flaw used in May: Blockaid

New Verus-Ethereum bridge attack drains $7.5 million through flaw used in May: Blockaid

The BlockThe Block2026/07/23 08:39
By:The Block

Verus-Ethereum Bridge has suffered a second exploit in just about two months after an attacker drained roughly $7.54 million in crypto assets on Wednesday by exploiting the same vulnerability class used in the protocol's May breach, according to blockchain security firm Blockaid.

In a post on X, Blockaid said the attacker abused the bridge's import path to trigger unbacked Ethereum-side payouts, draining ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from bridge reserves before converting the stolen assets into ETH.

Blockchain security firm CertiK also flagged the exploit, estimating losses at approximately $7.53 million. The firm said the attacker withdrew the funds through the Verus-Ethereum bridge, later swapped the stolen assets for 3,916.1 ETH and deposited the proceeds into Tornado Cash.

Meanwhile, Blockaid said the latest exploit appears related to the Verus-Ethereum bridge attack disclosed in May, citing the same bridge contract, entry path and vulnerability class, while noting the transaction was carried out by a different attacker using a new loot wallet.

The previous exploit on May 18 drained roughly $11.6 million from the bridge after the attacker converted the stolen assets into about 5,402 ETH. The attacker later returned 4,052 ETH after retaining a 25% white-hat bounty.

The Block has reached out to the Verus team for comment on the latest attack.


0
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

Understand the market, then trade.
Bitget offers one-stop trading for cryptocurrencies, stocks, and gold.
Trade now!

You may also like

The data center arms race extends to power infrastructure as Amazon signs a $8 billion, seven-year strategic agreement with Generac

Amazon has signed a generator supply agreement with Generac worth up to $8 billion over seven years. The first batch of orders, valued at $2.4 billion, will be delivered between 2027 and 2028, and long-term procurement will be further secured through warrants. Analysts predict that this agreement will enhance the certainty of Generac’s future earnings and demonstrates that the expansion of AI data centers is extending demand from chips and servers to power generation equipment and other electrical infrastructure.

华尔街见闻2026/09/17 13:41