Audit log

Every state-changing event for H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-08-07 00:05:00Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   zS2xGp28n3pv…qY7qXqCecopysha256 → base58

   verifying row…

   canonical bytes (35083 B) ▸

   {"actor":"system:backfill","investigation_id":"3e006894-1e8f-4d75-9ffa-6a43c96da138","kind":"publish","page_slug":"h2-2026-july-bridge-hack-wave-seven-attacks-m-lost","published_at":"2026-08-07T00:05:00.796Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost","sections":[{"content":"July 2026 saw an unprecedented cluster of cross-chain bridge exploits that security analysts described as a 'bridge hacking boom.' At minimum seven discrete bridge attacks were documented during the month, spanning multiple blockchain ecosystems and resulting in combined losses that various sources place between $57 million and $97 million when including the broader July DeFi loss tally. The PANews July 2026 security monthly report identified bridge attacks as the dominant loss category, with concentrated bridge attacks alone surpassing $35 million in a single 24-hour window on July 22–23. The Decripto analysis of the wave noted the role of AI-assisted tooling in accelerating attack sophistication. Year-to-date through July, bridge exploits had accounted for at least $328.6 million across eight or more major incidents, according to reporting from Bitcoin Foundation and CryptoTimes.","heading":"Overview of the July 2026 Bridge Hack Wave","severity":"critical","sources":[{"credibility":2,"name":"July Security Monthly Report: Total Losses Approximately $97 Million, Concentrated Cross-Chain Bridge Attacks Surge Over $35 Million — PANews","type":"news_article","url":"https://panews.io/articles/019fc67f-accb-77ca-93b2-4e7507f44f2d"},{"credibility":2,"name":"Bridge hacking boom in 2026, seven attacks in a month: artificial intelligence is to blame — Decripto","type":"news_article","url":"https://decripto.org/en/bridge-hacking-boom-in-2026-seven-attacks-in-a-month-artificial-intelligence-is-to-blame/"},{"credibility":2,"name":"Two Cross-Chain Bridges Hacked in One Day — $31.5M Lost — Bitcoin Foundation","type":"news_article","url":"https://bitcoinfoundation.org/news/crimes-and-fraud-news/bridge-hacks-july/"},{"credibility":2,"name":"Crypto Loses Over $47M in a Week as AFX Trade, Wanchain, Verus Get Hacked — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/26/crypto-loses-over-47m-in-a-week-as-afx-trade-wanchain-verus-get-hacked/"}]},{"content":"TeleSwap, a DeFi platform billing itself as a Bitcoin-native bridge hub, experienced suspicious outflows from its Bitcoin hot wallet on approximately July 15, 2026. The exploit was not disclosed publicly by the project; instead, on-chain researcher ZachXBT reported the incident on July 21, noting that over $735,000 had drained from the hot wallet and that transaction processing had silently halted. At the time of public disclosure, five days had elapsed with no communication from TeleSwap's team, a pattern noted by analysts as a red flag for incident response transparency. The attack vector was not conclusively determined in public reporting, though the halt of the hot wallet's transaction processing was consistent with a key compromise.","heading":"Attack 1: TeleSwap — $735,000 (July 15, 2026)","severity":"high","sources":[{"credibility":2,"name":"Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week — Protos","type":"news_article","url":"https://protos.com/across-allbridge-teleswap-lost-5-7m-to-bridge-hacks-in-past-week/"}]},{"content":"On July 17, 2026, the Solana deployment of the Across Protocol bridge was exploited for approximately $3.35 million to $4.5 million depending on source. The stolen funds belonged to Risk Labs, the foundation operating the relayer, rather than end users; all user bridge transfers were completed or refunded on the same day. The attack vector involved a missing verification of the 8-byte Anchor event discriminator in the off-chain Solana relayer code, which allowed an attacker to forge deposit events that the relayer treated as legitimate. The attacker deployed 1,627 single-use Solana wallets to submit fictitious deposit events with an aggregate face value of approximately $41.7 million, routing payment requests across 18 destination chains. Attacker funding sources included Tornado Cash on Ethereum and FixedFloat on Solana. Across Protocol committed to a public postmortem. This was reported as Across Protocol's first attack on Solana despite having processed over $34 billion in bridge volume.","heading":"Attack 2: Across Protocol (Solana Relayer) — $3.35–$4.5M (July 17, 2026)","severity":"high","sources":[{"credibility":2,"name":"Across Protocol exploited for $3.35 million — Web3 Is Going Great","type":"news_article","url":"https://www.web3isgoinggreat.com/single/across-protocol-exploit"},{"credibility":2,"name":"Across Protocol Reports First Attack on Solana After $34B in Bridge Volume — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/17/across-protocol-reports-first-attack-on-solana-after-34b-in-bridge-volume/"},{"credibility":2,"name":"Across Protocol Loses $4.5M in Exploit, User Funds Unaffected — CryptoNews","type":"news_article","url":"https://cryptonews.net/news/security/33204659/"},{"credibility":2,"name":"Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week — Protos","type":"news_article","url":"https://protos.com/across-allbridge-teleswap-lost-5-7m-to-bridge-hacks-in-past-week/"}]},{"content":"Allbridge Core, a cross-chain stablecoin bridge, suffered a flash loan exploit on July 20, 2026, losing approximately $1.65 to $1.66 million in USDC and USDT on its Solana deployment. The attacker used a roughly $1.12 million USDC flash loan from the Kamino lending protocol to rapidly manipulate the price ratio between USDC and USDT in Allbridge's liquidity pools. The vulnerability stemmed from a flaw in the protocol's internal pricing logic, which could be manipulated even when borrowing an asset collateralized by the same token denomination. Security analysts noted this was alleged to be a repeat of a previously identified single-pool pricing vulnerability; the earlier fix had not been applied to the Solana pools. Allbridge paused the protocol and requested the exploiter consider returning funds in exchange for a compensation arrangement.","heading":"Attack 3: Allbridge Core — $1.65–1.66M (July 20, 2026)","severity":"high","sources":[{"credibility":2,"name":"Allbridge exploited for $1.66 million — Web3 Is Going Great","type":"news_article","url":"https://www.web3isgoinggreat.com/single/allbridge-exploit"},{"credibility":2,"name":"Allbridge Core Loses $1.65M to Flash Loan Again After Its Single-Pool Fix Missed Solana — TechTimes","type":"news_article","url":"https://www.techtimes.com/articles/321044/20260720/allbridge-core-loses-165m-flash-loan-again-after-its-single-pool-fix-missed-solana.htm"},{"credibility":2,"name":"Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week — Protos","type":"news_article","url":"https://protos.com/across-allbridge-teleswap-lost-5-7m-to-bridge-hacks-in-past-week/"}]},{"content":"On July 21, 2026, attackers exploited the Wanchain-operated bridge connecting Cardano and BNB Chain, draining approximately 515 million NIGHT tokens valued at $10 million to $13 million depending on reporting source and token price at time of measurement. The root cause was identified by blockchain security firm BlockSec Phalcon as a non-injective signed-message encoding flaw in the bridge's TreasuryCheck validator. The bridge constructed signed messages by concatenating 14 variable-length redeemer fields without separators or length identifiers, allowing an attacker to reuse a legitimate signature for a materially larger transaction through field-boundary ambiguity. The NIGHT token price crashed more than 30% to an all-time low near $0.016 following the exploit. The Midnight Foundation confirmed the Midnight blockchain itself was unaffected. Wanchain took the bridge offline and subsequently offered the attacker a 10% white-hat bounty if 90% of funds were returned, setting an August 6, 2026 deadline.","heading":"Attack 4: Wanchain Cardano–BNB Chain Bridge — $10–13M (July 21, 2026)","severity":"critical","sources":[{"credibility":2,"name":"Wanchain Cardano Bridge Exploited, Hackers Stole $10M in NIGHT Tokens — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/21/wanchain-cardano-bridge-exploited-hackers-stole-10m-in-night-tokens/"},{"credibility":2,"name":"Breaking: Wanchain Cardano Bridge Breached in $13M Hack, 515M NIGHT Tokens Drained — CoinGape","type":"news_article","url":"https://coingape.com/wanchain-cardano-bridge-breached-in-13m-hack-515m-night-tokens-drained/"},{"credibility":2,"name":"Wanchain Bridge Breach Sends Midnight Token to All-Time Low — BeInCrypto","type":"news_article","url":"https://beincrypto.com/midnight-night-wanchain-bridge-exploit/"},{"credibility":2,"name":"Wanchain Sets August 6 Deadline for Cardano Bridge Hacker — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/31/wanchain-sets-august-6-deadline-for-cardano-bridge-hacker/"},{"credibility":2,"name":"Digging deep into Wanchain's Cardano-BNB Bridge exploit — HTX Insights","type":"research","url":"https://www.htx.com/news/digging-deep-into-wanchains-cardano-bnb-bridge-exploit-how-9-6NTmDiwf/"}]},{"content":"AFX Trade, an Arbitrum-based decentralized perpetuals exchange, suffered the largest individual bridge exploit of the July wave on July 22, 2026 at approximately 21:30 UTC. An attacker compromised the private signing keys of five of the bridge's seven validators, obtaining 7,142 of the 10,000 total voting units distributed across the validator set — exceeding the 6,667 required for quorum. The attacker used these keys to authorize a malicious transaction transferring approximately $24.15 million in USDC to an attacker-controlled address, completing the withdrawal within the protocol's 200-second challenge window. The stolen USDC was subsequently bridged to Ethereum and converted to approximately 12,467.5 ETH, nearly emptying the protocol's total value locked. Security firm Halborn published a detailed post-mortem of the attack mechanics. In response, AFX head of growth Ken C offered the attacker a white-hat bounty deal allowing retention of 30% ($7.2 million) in exchange for returning the remaining 70%.","heading":"Attack 5: AFX Trade Bridge — $24.15M (July 22, 2026)","severity":"critical","sources":[{"credibility":1,"name":"Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised"},{"credibility":2,"name":"Explained: The AFX Bridge Hack (July 2026) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-afxbridge-hack-july-2026"},{"credibility":2,"name":"AFX Trade offers exploiter $7.2M bounty to return 70% of stolen funds — CryptoBriefing","type":"news_article","url":"https://cryptobriefing.com/afx-trade-exploiter-white-hat-deal/"},{"credibility":2,"name":"AFX Bridge Exploit Drains $24 Million as July Crypto Hack Losses Near $100 Million — CryptoRank","type":"news_article","url":"https://cryptorank.io/news/feed/e911c-afx-bridge-exploit-drains-24-million-as-july-crypto-hack-losses-near-100-million"}]},{"content":"B² Network, a modular Bitcoin scaling solution, lost approximately 8.59 million B2 tokens valued at $3.86 million on July 23, 2026. The attack vector was a permissions failure rather than a cryptographic one: an attacker obtained unauthorized upgrade authority over the network's token staking contract. Once in control of the upgrade authority, the attacker drained the staking contract and converted approximately 5,409 Wrapped BNB (WBNB) worth roughly $3.11 million, with the remainder converted to other assets including ETH and stablecoins. B² Network suspended staking operations and committed to user compensation. The project subsequently offered the attacker legal immunity in exchange for return of 90% of stolen funds, a structure mirroring Wanchain's response to its own exploit two days prior. Security analysts noted funds were moved through Zcash via NEAR as part of the laundering chain.","heading":"Attack 6: B² Network Bridge — $3.86M (July 23, 2026)","severity":"high","sources":[{"credibility":2,"name":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"credibility":2,"name":"B² Network Faces $3.86 Million Token Drain As Attacker Sells 8.59M B2 — CryptoAdventure","type":"news_article","url":"https://cryptoadventure.com/b%C2%B2-network-faces-3-86-million-token-drain-as-attacker-sells-8-59m-b2/"},{"credibility":2,"name":"Three Crypto Bridge Hacks in DeFi Vanish $35.6M in One Day — CoinPedia","type":"news_article","url":"https://coinpedia.org/news/three-crypto-bridge-hacks-in-defi-vanish-35-6m-in-one-day/"}]},{"content":"The Verus–Ethereum bridge suffered its second major exploit within approximately two months on July 23, 2026 at 03:45 UTC, losing approximately $7.54 million in assets including ETH, tokenized bitcoin (tBTC), USDC, USDT, EURC, MKR, and scrvUSD. The attack exploited a flaw in the VerusProof.checkExportAndTransfers function that failed to verify that cross-chain asset transfers were backed by matching assets on the source chain before executing payouts. The attack mechanism involved a 0.01 VRSC transaction that triggered unbacked payouts of 1,137 ETH, 71.5 tBTC, and other tokens to a single attacker wallet. Security analysts characterized the attack as a near-exact replay of the May 2026 exploit that had drained $11.6 million through the same unpatched verification flaw. The stolen funds were partially laundered through Tornado Cash. Notably, user funds from the May 2026 hack had been redeposited into the bridge on July 8, and those same funds were among the assets drained a second time on July 23. The attacker converted proceeds to approximately 3,916.1 ETH.","heading":"Attack 7: Verus–Ethereum Bridge — $7.54M (July 23, 2026)","severity":"critical","sources":[{"credibility":2,"name":"Verus Ethereum Bridge Suffers Second $7.5 Million Exploit — CoinPedia","type":"news_article","url":"https://coinpedia.org/crypto-live-news/verus-ethereum-bridge-suffers-second-7-5-million-exploit/amp/"},{"credibility":2,"name":"Verus Ethereum Bridge Exploited Again for $7.54M in Repeat Attack — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/23/verus-ethereum-bridge-exploited-again-for-7-54m-in-repeat-attack/"},{"credibility":2,"name":"Verus Ethereum Bridge Exploit Drains $7.54M in Latest Attack — Cryptonomist","type":"news_article","url":"https://en.cryptonomist.ch/2026/07/23/verus-ethereum-bridge-exploit-2/"},{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"}]},{"content":"While technically occurring on June 22, 2026, the Taiko bridge exploit is contextually relevant as it directly preceded the July wave and its recovery timeline ran through July. Attackers crafted a forged message proof accepted by Ethereum mainnet despite no matching MessageSent event ever existing on the Taiko chain. The exploit abused Taiko's permissionless prover registration system: an SGX (Secure Enclave) signing key had been mistakenly exposed on GitHub, enabling a rogue SGX instance to register, submit invalid proofs, and unlock approximately $1.7 million in ERC20 assets from the vault. Block production was halted; Taiko reopened its bridge on approximately July 2, 2026 following an independent security review and full user reimbursement.","heading":"Supplementary Attack: Taiko Bridge — $1.7M (June 22, 2026 / Recovered July 2026)","severity":"high","sources":[{"credibility":1,"name":"Taiko fully restores cross-chain bridge just 10 days after a $1.7 million hack — CoinDesk","type":"news_article","url":"https://www.coindesk.com/markets/2026/07/02/taiko-s-bridge-is-back-online-after-usd1-7-million-hack-and-its-token-is-up-a-staggering-136"},{"credibility":2,"name":"Taiko Bridge Exploit: How a Leaked Key Drained $1.7M from an Ethereum L2 — Thirdweb Blog","type":"research","url":"https://blog.thirdweb.com/taiko-bridge-exploit-explained-how-a-leaked-key-led-to-1-7m-in-forged-withdrawals/"},{"credibility":2,"name":"Taiko Hack 2026: How Attackers Drained $1.7M Using Fake Bridge Proofs — CoinGabbar","type":"news_article","url":"https://www.coingabbar.com/en/crypto-currency-news/ethereum-taiko-hack-confirmed-17m-drained-bridge-exploit-2026"}]},{"content":"Garden Finance, an atomic-swap bridge protocol, paused operations on approximately July 27, 2026 after a $450,000 USDT exploit spanning Ethereum, Base, Arbitrum, and BNB Chain. Security firm Blockaid raised the alarm at 9:30 PM UTC on July 26. The breach targeted a third-party solver's off-chain database rather than Garden's audited smart contracts; the attacker manipulated transaction records within the solver's database to create fraudulent entries that deceived the solver into releasing funds for swaps that had never been legitimately initiated. Garden Finance stated it was working with zeroShadow, Quantstamp, and Blockaid on tracing and recovery. Analysts noted this was alleged to be Garden Finance's second exploit in nine months, with both incidents traced to solver-layer infrastructure, underscoring that the security perimeter of atomic-swap systems extends beyond audited contracts.","heading":"Supplementary Attack: Garden Finance — $450K (July 26–27, 2026)","severity":"medium","sources":[{"credibility":2,"name":"Garden Finance Halts App After $450K USDT Exploit Hits Four Blockchains — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/27/garden-finance-halts-app-after-450k-usdt-exploit-hits-four-blockchains/"},{"credibility":1,"name":"Garden Finance Says Solver Breach Caused $450K Drain — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/garden-finance-app-offline-450k-htlc-exploit"},{"credibility":2,"name":"Garden Finance takes app offline after independent solver database compromise — Crypto.News","type":"news_article","url":"https://crypto.news/garden-finance-takes-app-offline-after-independent-solver-database-compromise/"}]},{"content":"Security analysts examining the July 2026 cluster identified a pronounced shift in attack vectors away from smart contract code vulnerabilities toward non-code-level methods. The PANews monthly report characterized this trend as 'attack vectors accelerating their shift' toward off-chain infrastructure intrusions, signing key leaks, and governance manipulation. Across the seven core incidents: four attacks (AFX Trade, Across Protocol, TeleSwap, Taiko) involved compromise of private keys or off-chain signing infrastructure; two attacks (Wanchain, Verus) exploited cryptographic encoding or verification flaws in message-passing validation logic; one attack (Allbridge Core) involved on-chain flash loan price manipulation; and one attack (B² Network) targeted upgrade-authority permissions over a smart contract rather than its audited logic; and one attack (Garden Finance) targeted third-party solver off-chain databases. The Decripto analysis alleged that AI-assisted tooling was being used by attackers to accelerate discovery and exploitation of these non-code attack surfaces. The 1inch blog on 2026 bridge hacks documented that bridge infrastructure had produced the majority of the year's largest DeFi exploits, with failure modes unchanged from 2022. Several protocols offered white-hat bounty structures (10–30% retention) rather than pursuing legal remedies as a primary response mechanism.","heading":"Systemic Attack Vector Analysis","severity":"critical","sources":[{"credibility":2,"name":"July Security Monthly Report — PANews","type":"news_article","url":"https://panews.io/articles/019fc67f-accb-77ca-93b2-4e7507f44f2d"},{"credibility":2,"name":"Bridge hacking boom in 2026, seven attacks in a month: artificial intelligence is to blame — Decripto","type":"news_article","url":"https://decripto.org/en/bridge-hacking-boom-in-2026-seven-attacks-in-a-month-artificial-intelligence-is-to-blame/"},{"credibility":2,"name":"The biggest bridge hacks in 2026 — 1inch Blog","type":"news_article","url":"https://1inch.com/blog/post/the-biggest-bridge-hacks-in-2026"},{"credibility":2,"name":"Why Cross-Chain Bridges Keep Getting Hacked — Coin98","type":"news_article","url":"https://coin98.com/blog/why-cross-chain-bridges-keep-getting-hacked/"}]},{"content":"The bridge attack wave occurred against a backdrop of broader July 2026 crypto security losses. Different methodologies and inclusion criteria produced varying total figures: PANews reported approximately $97 million in total July protocol losses; CryptoAdventure and NullTX reported $210 million when including a Coldcard hardware wallet bug that alone accounted for approximately $110 million; the Medium Coinmonks tally reached $242 million using similar all-inclusive methodology. The bridge-specific cluster (core seven attacks) contributed an estimated $47–$57 million of the protocol losses total. Bridges accounted for approximately 21% of total July protocol losses by the PANews methodology. The month saw an 18.7% increase in losses over June 2026. Year-to-date 2026 bridge hack losses had exceeded $328.6 million by month-end across at least eight major incidents, with projections from DeFi analysts suggesting the full-year total could exceed $1 billion.","heading":"Broader July 2026 Context and Total Losses","severity":"high","sources":[{"credibility":2,"name":"July 2026 Crypto Hacks: $242M+ Lost as a Hardware Wallet Bug Outweighed Every DeFi Exploit — Medium/Coinmonks","type":"news_article","url":"https://medium.com/coinmonks/july-2026-crypto-hacks-242m-lost-as-a-hardware-wallet-bug-outweighed-every-defi-exploit-56ef16f82dc5"},{"credibility":2,"name":"Crypto Hack Losses Jump 177% To $210M In July As Coldcard Drain Leads — CryptoAdventure","type":"news_article","url":"https://cryptoadventure.com/crypto-hack-losses-jump-177-to-210m-in-july-as-coldcard-drain-leads/"},{"credibility":3,"name":"July 2026 Crypto Hacks: Nearly $200M Lost Across Wallets, DeFi and Bridges — Cryip","type":"news_article","url":"https://cryip.co/july-2026-crypto-hacks-nearly-200m-lost-wallets-defi-bridges/"},{"credibility":2,"name":"How July's $210M In Hacks Could Have Been Prevented — NullTX","type":"news_article","url":"https://nulltx.com/how-julys-210m-in-hacks-could-have-been-prevented"}]}],"sources_used":[{"credibility":2,"name":"July Security Monthly Report: Total Losses Approximately $97 Million — PANews","type":"news_article","url":"https://panews.io/articles/019fc67f-accb-77ca-93b2-4e7507f44f2d"},{"credibility":2,"name":"Bridge hacking boom in 2026, seven attacks in a month: artificial intelligence is to blame — Decripto","type":"news_article","url":"https://decripto.org/en/bridge-hacking-boom-in-2026-seven-attacks-in-a-month-artificial-intelligence-is-to-blame/"},{"credibility":2,"name":"Two Cross-Chain Bridges Hacked in One Day — $31.5M Lost — Bitcoin Foundation","type":"news_article","url":"https://bitcoinfoundation.org/news/crimes-and-fraud-news/bridge-hacks-july/"},{"credibility":1,"name":"Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised"},{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"credibility":1,"name":"Taiko fully restores cross-chain bridge just 10 days after a $1.7 million hack — CoinDesk","type":"news_article","url":"https://www.coindesk.com/markets/2026/07/02/taiko-s-bridge-is-back-online-after-usd1-7-million-hack-and-its-token-is-up-a-staggering-136"},{"credibility":1,"name":"Garden Finance Says Solver Breach Caused $450K Drain — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/garden-finance-app-offline-450k-htlc-exploit"},{"credibility":2,"name":"Verus Ethereum Bridge Exploited Again for $7.54M in Repeat Attack — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/23/verus-ethereum-bridge-exploited-again-for-7-54m-in-repeat-attack/"},{"credibility":2,"name":"Wanchain Cardano Bridge Exploited, Hackers Stole $10M in NIGHT Tokens — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/21/wanchain-cardano-bridge-exploited-hackers-stole-10m-in-night-tokens/"},{"credibility":2,"name":"Wanchain Sets August 6 Deadline for Cardano Bridge Hacker — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/31/wanchain-sets-august-6-deadline-for-cardano-bridge-hacker/"},{"credibility":2,"name":"Across Protocol Reports First Attack on Solana After $34B in Bridge Volume — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/17/across-protocol-reports-first-attack-on-solana-after-34b-in-bridge-volume/"},{"credibility":2,"name":"Crypto Loses Over $47M in a Week as AFX Trade, Wanchain, Verus Get Hacked — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/26/crypto-loses-over-47m-in-a-week-as-afx-trade-wanchain-verus-get-hacked/"},{"credibility":2,"name":"Across Protocol exploited for $3.35 million — Web3 Is Going Great","type":"news_article","url":"https://www.web3isgoinggreat.com/single/across-protocol-exploit"},{"credibility":2,"name":"Allbridge exploited for $1.66 million — Web3 Is Going Great","type":"news_article","url":"https://www.web3isgoinggreat.com/single/allbridge-exploit"},{"credibility":2,"name":"Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week — Protos","type":"news_article","url":"https://protos.com/across-allbridge-teleswap-lost-5-7m-to-bridge-hacks-in-past-week/"},{"credibility":2,"name":"B2 Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"credibility":2,"name":"Explained: The AFX Bridge Hack (July 2026) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-afxbridge-hack-july-2026"},{"credibility":2,"name":"Breaking: Wanchain Cardano Bridge Breached in $13M Hack, 515M NIGHT Tokens Drained — CoinGape","type":"news_article","url":"https://coingape.com/wanchain-cardano-bridge-breached-in-13m-hack-515m-night-tokens-drained/"},{"credibility":2,"name":"Wanchain Bridge Breach Sends Midnight Token to All-Time Low — BeInCrypto","type":"news_article","url":"https://beincrypto.com/midnight-night-wanchain-bridge-exploit/"},{"credibility":2,"name":"Allbridge Core Loses $1.65M to Flash Loan Again After Its Single-Pool Fix Missed Solana — TechTimes","type":"news_article","url":"https://www.techtimes.com/articles/321044/20260720/allbridge-core-loses-165m-flash-loan-again-after-its-single-pool-fix-missed-solana.htm"},{"credibility":2,"name":"Taiko Bridge Exploit: How a Leaked Key Drained $1.7M from an Ethereum L2 — Thirdweb Blog","type":"research","url":"https://blog.thirdweb.com/taiko-bridge-exploit-explained-how-a-leaked-key-led-to-1-7m-in-forged-withdrawals/"},{"credibility":2,"name":"Garden Finance Halts App After $450K USDT Exploit Hits Four Blockchains — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/27/garden-finance-halts-app-after-450k-usdt-exploit-hits-four-blockchains/"},{"credibility":2,"name":"Three Crypto Bridge Hacks in DeFi Vanish $35.6M in One Day — CoinPedia","type":"news_article","url":"https://coinpedia.org/news/three-crypto-bridge-hacks-in-defi-vanish-35-6m-in-one-day/"},{"credibility":2,"name":"Verus Ethereum Bridge Suffers Second $7.5 Million Exploit — CoinPedia","type":"news_article","url":"https://coinpedia.org/crypto-live-news/verus-ethereum-bridge-suffers-second-7-5-million-exploit/amp/"},{"credibility":2,"name":"Digging deep into Wanchain's Cardano-BNB Bridge exploit — HTX Insights","type":"research","url":"https://www.htx.com/news/digging-deep-into-wanchains-cardano-bnb-bridge-exploit-how-9-6NTmDiwf/"},{"credibility":2,"name":"AFX Bridge Exploit Drains $24 Million as July Crypto Hack Losses Near $100 Million — CryptoRank","type":"news_article","url":"https://cryptorank.io/news/feed/e911c-afx-bridge-exploit-drains-24-million-as-july-crypto-hack-losses-near-100-million"},{"credibility":2,"name":"AFX Trade offers exploiter $7.2M bounty to return 70% of stolen funds — CryptoBriefing","type":"news_article","url":"https://cryptobriefing.com/afx-trade-exploiter-white-hat-deal/"},{"credibility":2,"name":"July 2026 Crypto Hacks: $242M+ Lost as a Hardware Wallet Bug Outweighed Every DeFi Exploit — Medium/Coinmonks","type":"news_article","url":"https://medium.com/coinmonks/july-2026-crypto-hacks-242m-lost-as-a-hardware-wallet-bug-outweighed-every-defi-exploit-56ef16f82dc5"},{"credibility":2,"name":"The biggest bridge hacks in 2026 — 1inch Blog","type":"news_article","url":"https://1inch.com/blog/post/the-biggest-bridge-hacks-in-2026"},{"credibility":2,"name":"Across Protocol Loses $4.5M in Exploit, User Funds Unaffected — CryptoNews","type":"news_article","url":"https://cryptonews.net/news/security/33204659/"}],"summary":"In July 2026, at least seven cross-chain bridge protocols were exploited in a concentrated wave of attacks, collectively losing over $57 million in user and protocol funds. The incidents spanned Arbitrum, Ethereum, Solana, BNB Chain, Cardano, and Bitcoin-adjacent infrastructure, and were characterized by a shift toward non-code-level attack vectors including compromised signing keys, off-chain validator compromise, and replay/signature-encoding flaws. The cluster drew significant industry attention and raised systemic concerns about bridge security architecture.","timeline":[{"date":"2026-06-22","event":"Taiko bridge exploited for $1.7M via forged message proof enabled by leaked SGX signing key; block production halted.","source":"CoinDesk","source_url":"https://www.coindesk.com/markets/2026/07/02/taiko-s-bridge-is-back-online-after-usd1-7-million-hack-and-its-token-is-up-a-staggering-136"},{"date":"2026-07-02","event":"Taiko reopens its Ethereum L2 bridge after 10-day pause; all affected users reimbursed following independent security review.","source":"CoinDesk","source_url":"https://www.coindesk.com/markets/2026/07/02/taiko-s-bridge-is-back-online-after-usd1-7-million-hack-and-its-token-is-up-a-staggering-136"},{"date":"2026-07-08","event":"Funds recovered from Verus May 2026 hack redeposited into the Verus-Ethereum bridge — later drained again on July 23.","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"date":"2026-07-15","event":"TeleSwap Bitcoin hot wallet begins showing suspicious outflows totaling over $735,000; transaction processing silently halts with no public disclosure.","source":"Protos","source_url":"https://protos.com/across-allbridge-teleswap-lost-5-7m-to-bridge-hacks-in-past-week/"},{"date":"2026-07-17","event":"Across Protocol Solana relayer exploited for $3.35–$4.5M via forged deposit events using missing Anchor discriminator verification; 1,627 attacker wallets deployed; no user funds lost.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2026/07/17/across-protocol-reports-first-attack-on-solana-after-34b-in-bridge-volume/"},{"date":"2026-07-20","event":"Allbridge Core Solana pool exploited for $1.65M via flash loan price manipulation of USDC/USDT pool ratio; protocol paused.","source":"TechTimes","source_url":"https://www.techtimes.com/articles/321044/20260720/allbridge-core-loses-165m-flash-loan-again-after-its-single-pool-fix-missed-solana.htm"},{"date":"2026-07-21","event":"Wanchain Cardano–BNB Chain bridge exploited for $10–13M (515M NIGHT tokens) via non-injective signed-message encoding flaw; NIGHT token crashes 30%+.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2026/07/21/wanchain-cardano-bridge-exploited-hackers-stole-10m-in-night-tokens/"},{"date":"2026-07-21","event":"ZachXBT publicly discloses TeleSwap exploit five days after the fact; five days had elapsed with no communication from TeleSwap.","source":"Protos","source_url":"https://protos.com/across-allbridge-teleswap-lost-5-7m-to-bridge-hacks-in-past-week/"},{"date":"2026-07-22","event":"AFX Trade Arbitrum bridge drained of $24.15M USDC at 21:30 UTC via compromised validator private keys (5 of 7 validators); funds converted to ~12,467 ETH.","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised"},{"date":"2026-07-23","event":"B2 Network staking contract exploited for $3.86M via unauthorized upgrade authority takeover; 8.59M B2 tokens drained and converted to WBNB.","source":"Metaverse Post","source_url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"date":"2026-07-23","event":"Verus-Ethereum bridge exploited a second time for $7.54M at 03:45 UTC via the same unpatched VerusProof verification flaw from May; proceeds laundered via Tornado Cash.","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"date":"2026-07-23","event":"Three protocols (AFX Trade, B2 Network, Verus) lose over $35M in a single day; described by analysts as peak of the July bridge hack wave.","source":"CoinPedia","source_url":"https://coinpedia.org/news/three-crypto-bridge-hacks-in-defi-vanish-35-6m-in-one-day/"},{"date":"2026-07-26","event":"Garden Finance solver database breached for $450K across four chains; Blockaid raises alarm at 9:30 PM UTC; Garden halts app and engages security partners.","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/garden-finance-app-offline-450k-htlc-exploit"},{"date":"2026-07-31","event":"Wanchain sets August 6, 2026 deadline for Cardano bridge hacker to return 90% of stolen NIGHT tokens in exchange for 10% white-hat bounty and no civil action.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2026/07/31/wanchain-sets-august-6-deadline-for-cardano-bridge-hacker/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision ab241aa0-5c6c-4e6e-9d1b-523c17b1820ecopy