Verus Ethereum Bridge Exploited for $7.5 Million in Second Major Hack of 2024

Verus’ Ethereum cross-chain bridge has been exploited for over $7.5 million in digital assets, marking the second significant security breach targeting the bridge in 2024. Onchain Lens, a blockchain analytics platform, reported the incident, revealing that the attacker manipulated the bridge’s verification system to drain funds.

How the Exploit Worked

The hacker exploited a critical vulnerability in the bridge’s cross-chain proof mechanism. By forging verification proofs, the attacker was able to withdraw reserve assets held on the Ethereum network that had not been correspondingly unlocked on the Verus chain. This type of exploit, known as a proof forgery attack, undermines the fundamental trust assumption of cross-chain bridges, which rely on validators or cryptographic proofs to ensure that assets are locked on one chain before being minted on another.

A Recurring Security Issue

This is not the first time the Verus bridge has been compromised. In May 2024, the bridge suffered an even larger exploit, resulting in losses of approximately $11.58 million. The recurrence of such attacks raises serious questions about the bridge’s security architecture and the effectiveness of post-incident remediation measures. The Verus team has not yet released an official statement detailing the root cause of the latest exploit or outlining plans for user compensation.

Why This Matters for DeFi Users

Cross-chain bridges remain one of the most targeted vectors in decentralized finance. According to industry data, bridge exploits have accounted for billions of dollars in losses over the past three years. For users, these incidents highlight the importance of understanding the security models of the bridges they use. Bridges relying on trusted validators or complex cryptographic schemes can present single points of failure. The Verus incident underscores that even after a major hack, vulnerabilities may persist if not fully addressed.

Conclusion

The $7.5 million exploit of the Verus Ethereum bridge is a stark reminder of the ongoing security challenges facing cross-chain infrastructure. As the DeFi ecosystem continues to grow, the frequency and sophistication of such attacks demand that projects prioritize robust security audits, transparent incident response, and continuous improvement of bridge protocols. Users are advised to exercise caution and diversify their exposure across different bridging solutions.

FAQs

Q1: What was stolen in the Verus bridge exploit?
The attacker drained over $7.5 million in digital assets from the bridge’s reserves on Ethereum.

Q2: How did the hacker bypass the bridge’s security?
The hacker forged cross-chain proofs, allowing them to withdraw assets from Ethereum that had not been unlocked on the Verus chain.

Q3: Has Verus been hacked before?
Yes. In May 2024, the Verus bridge lost approximately $11.58 million in a separate exploit.