Verus Ethereum Bridge Reportedly Exploited for $11.58 Million
Summary
The Verus Protocol Ethereum bridge was compromised on Monday, resulting in the theft of approximately $11.58 million in digital assets, including Ether, USDC, and tBTC v2. Security firms Blockaid and ExVul identified that the exploit occurred because the bridge failed to properly validate cross-chain transfer instructions, allowing a hacker to trick the system into releasing funds from its reserves. The vulnerability has been described as a missing source-amount validation error in the protocol's code. While Verus had not publicly confirmed the incident at the time of reporting, experts noted similarities to past bridge exploits like Nomad and Wormhole, emphasizing the need for stricter payload validation and enhanced security measures for cross-chain bridges.
(Source:Cointelegraph)