Verus Protocol’s Ethereum Bridge Exploited for $11.6 Million
- A hacker exploited the Verus Protocol’s Ethereum bridge, transferring at least $11.58 million in cryptocurrency.
- The exploit involved a fake cross-chain transfer message, leading to the unauthorized withdrawal of funds including 1,625 Ether (ETH) and USDC.
- Onchain security platforms Blockaid and PeckShield confirmed the incident, noting that the stolen funds were converted into Ether.
- The attack is reminiscent of previous exploits like the $190 million Nomad Bridge incident and the $325 million Wormhole exploit from last year.
- Security experts highlighted a missing source-amount validation as a critical vulnerability that facilitated the attack.
This incident underscores ongoing vulnerabilities in DeFi protocols, with over $168 million reportedly stolen from various projects in recent months. The need for improved security measures in cross-chain transactions has become increasingly urgent.
The Verus Protocol exploit highlights significant risks within decentralized finance, as evidenced by the loss of over $11 million due to a deceptive transfer method.(Source)