Skip to main content
AVOID.NET
Sign in

H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost

avoid.net/h2-2026-july-bridge-hack-wave-seven-attacks-m-lost→0/100·82% conf.
[VERIFIED]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·RvdtH6…y8Fg

Summary

In July 2026, at least seven cross-chain bridge protocols were exploited in a concentrated wave of attacks, collectively losing over $57 million in user and protocol funds. The incidents spanned Arbitrum, Ethereum, Solana, BNB Chain, Cardano, and Bitcoin-adjacent infrastructure, and were characterized by a shift toward non-code-level attack vectors including compromised signing keys, off-chain validator compromise, and replay/signature-encoding flaws. The cluster drew significant industry attention and raised systemic concerns about bridge security architecture.

Connected Entities

20 entities · 60 linked investigations
Organizations
□Ethereum64□Allbridge Core□Arbitrum□Binance□Midnight□Cardano□Allbridge□B² Network□Wanchain□Solana□ZachXBT□AFX Trade□BNB Chain Bridge□Taiko
Protocols
⌂FixedFloat10⌂Garden Finance⌂Across Protocol⌂TeleSwap
Tokens
♦Bitcoin♦H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost
Relationships
  • Across Protocol→mentioned with→Binance(70%)
  • Across Protocol→mentioned with→Arbitrum(60%)
  • Across Protocol→mentioned with→Ethereum(70%)
  • Ethereum→mentioned with→Bitcoin(60%)
  • Taiko→mentioned with→Ethereum(80%)
  • ZachXBT→mentioned with→Ethereum(70%)
  • ZachXBT→mentioned with→Bitcoin(65%)
  • ZachXBT→mentioned with→Binance(60%)
  • B² Network→mentioned with→Bitcoin(80%)
  • B² Network→mentioned with→Ethereum(70%)
  • + 66 more
Also appears in
Crypto Whale Repeat Phishing Drain — August 2026·2Coinsbuy Exchange·42Trust Wallet Chrome Extension Hack (December 2025)·28Seneca Protocol·25Peapods Finance·42MangoFarmSOL·2PrismaLST·10FixedFloat·10Crypto Whale Repeat Phishing — $25.6M Drain August 2026·0Bridgers Cross-Chain Swap·28+ 50 more

Connected Through

19 shared actors · 560 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost?

Timeline(14 events)

22 June 2026

Taiko bridge exploited for $1.7M via forged message proof enabled by leaked SGX signing key; block production halted.

CoinDesk

2 July 2026

Taiko reopens its Ethereum L2 bridge after 10-day pause; all affected users reimbursed following independent security review.

CoinDesk

8 July 2026

Funds recovered from Verus May 2026 hack redeposited into the Verus-Ethereum bridge — later drained again on July 23.

CoinDesk

15 July 2026

TeleSwap Bitcoin hot wallet begins showing suspicious outflows totaling over $735,000; transaction processing silently halts with no public disclosure.

Protos

17 July 2026

Across Protocol Solana relayer exploited for $3.35–$4.5M via forged deposit events using missing Anchor discriminator verification; 1,627 attacker wallets deployed; no user funds lost.

CryptoTimes

20 July 2026

Allbridge Core Solana pool exploited for $1.65M via flash loan price manipulation of USDC/USDT pool ratio; protocol paused.

TechTimes

21 July 2026

Wanchain Cardano–BNB Chain bridge exploited for $10–13M (515M NIGHT tokens) via non-injective signed-message encoding flaw; NIGHT token crashes 30%+.

CryptoTimes

21 July 2026

ZachXBT publicly discloses TeleSwap exploit five days after the fact; five days had elapsed with no communication from TeleSwap.

Protos

22 July 2026

AFX Trade Arbitrum bridge drained of $24.15M USDC at 21:30 UTC via compromised validator private keys (5 of 7 validators); funds converted to ~12,467 ETH.

CoinDesk

23 July 2026

B2 Network staking contract exploited for $3.86M via unauthorized upgrade authority takeover; 8.59M B2 tokens drained and converted to WBNB.

Metaverse Post

23 July 2026

Verus-Ethereum bridge exploited a second time for $7.54M at 03:45 UTC via the same unpatched VerusProof verification flaw from May; proceeds laundered via Tornado Cash.

CoinDesk

23 July 2026

Three protocols (AFX Trade, B2 Network, Verus) lose over $35M in a single day; described by analysts as peak of the July bridge hack wave.

CoinPedia

26 July 2026

Garden Finance solver database breached for $450K across four chains; Blockaid raises alarm at 9:30 PM UTC; Garden halts app and engages security partners.

CoinTelegraph

31 July 2026

Wanchain sets August 6, 2026 deadline for Cardano bridge hacker to return 90% of stolen NIGHT tokens in exchange for 10% white-hat bounty and no civil action.

CryptoTimes
Provenance & Audit Trail
Anchored on SolanaVerify on-chain29 Wayback Archives

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (4 events). 29 of 30 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-09-0924 claims checked6 corrections pending0 applied⛓ anchoredSee findings →
full audit log →version history →

model: claude-sonnet-4-6

generated: 8/7/2026, 12:04:48 AM

last updated: 8/8/2026, 4:39:02 AM

11 views

avoid.net — verified advice for a post-truth world