Verus Bridge Hack Drains $11.5M in Ethereum Assets Through Exploit Attack

• Blockaid traced stolen bridge assets while attackers converted funds into Ethereum.
• GoPlus identified possible validation bypass vulnerability affecting Verus bridge reserve security.
• Verus remained silent as investigators monitored stolen Ethereum across multiple wallets.

Blockaid has reported a major exploit targeting the Verus Ethereum bridge, with attackers draining more than $11.5 million worth of crypto assets from the protocol’s reserves while investigators continued tracing the movement of the stolen funds across several Ethereum wallets. According to Blockaid, the attacker operated through wallet address “0x5aBb…D5777,” while the stolen assets were later transferred into another wallet identified as “0x65C…C25F9,” with the security platform sharing the findings through a detailed update posted on X late Sunday.

Meanwhile, PeckShield disclosed that the exploit drained 103.6 tBTC, 1,625 ETH, and nearly 147,000 USDC from the Verus-Ethereum bridge reserves, before the attacker eventually converted the stolen assets into roughly 5,402 ETH valued at approximately $11.4 million. Additionally, PeckShield revealed that the attacker’s wallet initially received 1 ETH through Tornado Cash nearly 14 hours before the exploit unfolded, a detail that immediately attracted attention because attackers frequently use crypto mixers to obscure transaction origins before executing large-scale blockchain exploits.

Bridge-related attacks have continued creating significant concerns across decentralized finance markets because attackers consistently target weaknesses tied to cross-chain communication systems, transaction validation mechanisms, and reserve management structures used by interoperability protocols.

Also Read: Bitcoin (BTC) Falls Below $77,000 as Broader Crypto Market Extends Daily Losses

GoPlus Points to Possible Validation Bypass

GoPlus also released additional technical observations surrounding the exploit process, explaining that the attacker initially submitted a low-value transaction before triggering a bridge contract function that batch-transferred reserve assets directly into the drainer wallet. Moreover, according to GoPlus, the exploit likely involved cross-chain message validation forgery, withdrawal logic bypass, or an access control vulnerability affecting the bridge infrastructure, with the firm noting that similar weaknesses have contributed to several major bridge-related exploits recorded throughout recent years.

Verus launched its Ethereum bridge in October 2023 to facilitate transfers between the Verus blockchain and Ethereum, although the latest exploit has now placed renewed scrutiny on the project’s bridge security architecture and reserve protection systems. Besides the direct financial losses, the incident has also intensified broader concerns surrounding interoperability protocols across the blockchain industry because several bridge exploits recorded over recent years exposed weaknesses tied to signature verification systems and transaction approval mechanisms.

Verus has not publicly commented on the exploit as of publication, although blockchain investigators and security firms continue monitoring the movement of the stolen Ethereum across multiple wallets connected to the attacker. The Verus exploit adds another major bridge-related security breach to the growing list of decentralized finance attacks recorded this year, while also highlighting how cross-chain infrastructure remains vulnerable to increasingly sophisticated blockchain exploits targeting validation and reserve management systems.

Also Read: Vitalik Buterin Rejects Ethereum Storage Proposal as State Size Crisis Grows

The post Verus Bridge Hack Drains $11.5M in Ethereum Assets Through Exploit Attack appeared first on 36Crypto.