Verus Ethereum Bridge drained of $7.54M in repeat exploit

The incident occurred at 03:45 UTC, when an attacker drained approximately 1,137 ETH alongside various tokens including USDC, USDT, and MKR. Onchain data confirms the funds were siphoned into a wallet identified as 0xCFd0A20703cD11E0b9f665e1C3F1Ef989C142D54. While the specific root cause remains under investigation, Blockaid noted that the attack mirrors the May breach, which involved a failure to properly validate cross-chain imports against source-side assets.

This latest strike was part of a volatile Thursday for decentralized finance, with Lookonchain reporting over $35.55 million in combined losses across three separate protocols. Alongside the Verus incident, AFX Trade lost $24.15 million and the B² Network reported a $3.86 million exploit. The recurring nature of the Verus vulnerability has intensified scrutiny of bridge security, as developers struggle to ensure that assets released on Ethereum are strictly backed by verified transfers from the source chain.