Tools Crypto Exploit Tracker exploit-0019
Exploit record
Verus Ethereum Bridge Exploit (second)
- Loss
- $8M
- Attack vector
- Bridge
- Chain
- Ethereum
- Sector
- Bridge
What happened
On 23 July 2026, the Verus Ethereum bridge was drained of about $7.54M through the same contract flaw as its May 2026 hack. An attacker forged the cross-chain proof the bridge failed to verify and triggered unbacked payouts, taking ETH, tBTC, USDC, USDT, EURC, MKR and scrvUSD.
Funds had been redeposited on 8 July and were drained again two weeks later. The stolen funds were converted into roughly 3,916 ETH and moved through Tornado Cash. Verus held close to $100M in total value locked at the start of 2025 and is down to single-digit millions.
Sources
- YFarmX reportyfarmx.com/crypto-bridge-attacks-36m-keys-not-cryptography/
- DefiLlama (Verus TVL)defillama.com/protocol/verus
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026