{"investigation":{"slug":"adshares-bridge-ads","entity_name":"Adshares Bridge (ADS)","trust_score":28,"severity_base":null,"score_modifier":0,"confidence":0.72,"status":"published","content_type":"investigation","summary":"Adshares is a Warsaw-based decentralized advertising protocol operating a proprietary dPoS blockchain with cross-chain bridges to Ethereum, BSC, Base, and Polygon. In May 2026 its Ethereum bridge was exploited for approximately $628,000 through fake wrapped-token minting, making it one of eight bridge exploits tracked by PeckShield that month. Approximately 86% of stolen funds were returned after the team offered a 10% whitehat bounty, but no public post-mortem has been published and the root cause of the bridge compromise remains unconfirmed.","sections":[{"content":"","heading":"","sources":[{"url":"","name":"https://cryptoadventure.com/adshares-bridge-exploiter-returns-256-eth-after-628k-incident/","type":"other","credibility":3},{"url":"","name":"https://www.panewslab.com/en/articles/019e3ae3-2795-761d-9fbc-5b1b3cdb86c7","type":"other","credibility":3},{"url":"","name":"https://www.mexc.com/news/1100734","type":"other","credibility":3},{"url":"","name":"https://hacked.slowmist.io/","type":"other","credibility":3}],"severity":"medium"},{"content":"","heading":"","sources":[{"url":"","name":"https://cryptoadventure.com/adshares-bridge-exploiter-returns-256-eth-after-628k-incident/","type":"other","credibility":3},{"url":"","name":"https://news.bitcoin.com/crypto-bridge-exploits-328-million-may-2026-peckshield/","type":"other","credibility":3}],"severity":"medium"},{"content":"","heading":"","sources":[{"url":"","name":"https://www.rootdata.com/Projects/detail/Adshares?k=MTQ3OA%3D%3D","type":"other","credibility":3},{"url":"","name":"https://coinmarketcap.com/currencies/adshares/","type":"other","credibility":3},{"url":"","name":"https://adshares.net/blockchain","type":"other","credibility":3},{"url":"","name":"https://adshares.net/","type":"other","credibility":3}],"severity":"medium"},{"content":"","heading":"","sources":[{"url":"","name":"https://cryptoadventure.com/adshares-bridge-exploiter-returns-256-eth-after-628k-incident/","type":"other","credibility":3},{"url":"","name":"https://www.mexc.com/news/1100734","type":"other","credibility":3}],"severity":"medium"},{"content":"","heading":"","sources":[{"url":"","name":"https://x.com/zachxbt","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2026-05-15","event":"Adshares cross-chain bridge on Ethereum exploited; attacker uses bridge-minter EOA to sign three wrapTo() calls with non-existent native-chain transaction IDs, minting approximately 1.2 million fake wADS tokens","source":"SlowMist Hacked / PeckShield","source_url":"https://hacked.slowmist.io/"},{"date":"2026-05-17","event":"Exploit widely reported; attacker dumps fake wADS via Uniswap V4 UniversalRouter, draining approximately 148.5 ETH and $305,000 USDC for total losses of approximately $628,000","source":"CryptoAdventure / PANews","source_url":"https://cryptoadventure.com/adshares-bridge-exploiter-returns-256-eth-after-628k-incident/"},{"date":"2026-05-17","event":"Adshares team posts on-chain whitehat message offering 10% bounty in exchange for return of 90% of stolen funds","source":"CryptoAdventure","source_url":"https://cryptoadventure.com/adshares-bridge-exploiter-returns-256-eth-after-628k-incident/"},{"date":"2026-05-18","event":"PeckShield detects 256 ETH (approximately $540,700, roughly 86% of stolen funds) returned from exploiter address to Adshares deployer address; PANews reports on recovery","source":"PANews / PeckShield","source_url":"https://www.panewslab.com/en/articles/019e3ae3-2795-761d-9fbc-5b1b3cdb86c7"},{"date":"2026-05-19","event":"MEXC News publishes report on the 86% fund recovery; no post-mortem from Adshares team yet published","source":"MEXC News","source_url":"https://www.mexc.com/news/1100734"},{"date":"2026-05-28","event":"As of investigation date, no public post-mortem has been published by the Adshares team; bridge security status remains unconfirmed; approximately $87,300 (14% of exploit proceeds) not returned","source":"AVOID.NET investigation","source_url":"https://avoid.net"}],"sources_used":[],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-28T05:10:38.66233+00:00","updated_at":"2026-05-28T08:10:44.633+00:00"}}