New Verus-Ethereum bridge attack drains $7.5 million through flaw used in May: Blockaid
Verus-Ethereum Bridge has suffered a second exploit in just about two months after an attacker drained roughly $7.54 million in crypto assets on Wednesday by exploiting the same vulnerability class used in the protocol's May breach, according to blockchain security firm Blockaid.
In a post on X, Blockaid said the attacker abused the bridge's import path to trigger unbacked Ethereum-side payouts, draining ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from bridge reserves before converting the stolen assets into ETH.
Blockchain security firm CertiK also flagged the exploit, estimating losses at approximately $7.53 million. The firm said the attacker withdrew the funds through the Verus-Ethereum bridge, later swapped the stolen assets for 3,916.1 ETH and deposited the proceeds into Tornado Cash.
Meanwhile, Blockaid said the latest exploit appears related to the Verus-Ethereum bridge attack disclosed in May, citing the same bridge contract, entry path and vulnerability class, while noting the transaction was carried out by a different attacker using a new loot wallet.
The previous exploit on May 18 drained roughly $11.6 million from the bridge after the attacker converted the stolen assets into about 5,402 ETH. The attacker later returned 4,052 ETH after retaining a 25% white-hat bounty.
The Block has reached out to the Verus team for comment on the latest attack.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
U.S. Stocks Preview | Three Major Index Futures Rise, WTI Crude Falls Below $100, Midterm Elections, Apple Earnings, and Nonfarm Payrolls All Coming This Week
On November 2 (Monday), before the US stock market opened, futures for the three major US stock indexes all rose.
UK factory output posts strongest growth in over two years! Cost pressures are rising again, further reinforcing the Bank of England's rate hike path this week
Orders and production in the UK are recovering at an accelerating pace, but rising input costs and stagnant hiring mean that improved demand has not yet smoothly translated into business profits and employment growth.
Acquisition rumors of Global Payments spark valuation discussions! "Big Short" Burry: The real opportunity lies in Fiserv (FISV.US) and PayPal (PYPL.US)
Burry believes Fiserv has a potential acquisition price of $100 to $120, offering an upside of 100% to 140% from the current price. He reiterates that PayPal is a "good pitch," while questioning the acquisition value of Global Payments.
After the Nasdaq evaporated over $2 trillion in a single month, Wall Street is starting to look for buying opportunities! Deutsche Bank upgrades its technology rating, and Goldman Sachs’s “seven signals” outline the bull narrative.
Deutsche Bank is optimistic about U.S. tech stocks, overturning its downgrade rating from three weeks ago. The bank claims that the large sell-off has created attractive buying opportunities and that most of the risks related to artificial intelligence have already been excessively priced in by the market.
Crypto prices
More
