Tools Crypto Exploit Tracker exploit-0028
Exploit record
Taiko Bridge
- Loss
- $2M
- Attack vector
- Bridge Exploit
- Chain
- Ethereum
- Sector
- Bridge
What happened
Ethereum layer-2 Taiko halted block production in late June 2026 after an attacker used forged cross-chain proofs to withdraw about $1.7 million from its bridge without matching deposits.
The root cause was an SGX signing key left exposed on GitHub: Taiko's permissionless prover registration allowed a rogue SGX instance to register and submit invalid proofs that the system accepted, letting fake withdrawal requests clear on Ethereum. The team froze activity within hours and urged users to withdraw; the attacker had already moved about 2 million TAIKO (roughly $170,000) to MEXC before the freeze, and the TAIKO token fell around 10%.
Sources
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026