Signature: 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

The Verus-Ethereum bridge was hacked, resulting in approximately $11.58 million in losses – Blockaid warns that the exploit is ongoing.

Blockaid’s exploit detection system has identified an active attack on the Verus-Ethereum bridge.

According to real-time data, the attacker has already extracted approximately $11.58 million from the bridge’s smart contracts. The incident involves the TrustedVolumes resolver (a 1inch market maker) on Ethereum, with the exploiter address and transaction hash already publicly flagged.

Screenshot 2026 05 18 101254

This is yet another reminder of the persistent risks in cross-chain bridges, even for established projects. The total loss is still being confirmed, but early estimates suggest it could rise as the attacker continues to move funds. The Verus and Ethereum teams are expected to issue official statements shortly.

Attacker EOA: 0x5aBb91B9c01A5Ed3aE762d32B236595B459D5777
Drainer wallet (still holding the funds): 0x65Cb8b128Bf6e690761044CCECA422bb239C25F9
Exploit tx:
etherscan.io/tx/0x6990f0172
Bridge contract:
etherscan.io/address/0x7151
 

Lessons for the ONFA community: Cross-chain bridge exploits remain one of the highest-risk areas in DeFi. Always verify bridge security audits, use official routes only, and consider multi-bridge strategies to reduce single-point failure risks. #DYOR and stay safe!

Source: https://x.com/blockaid_/status/2056176541785034803