Audit log

Every state-changing event for July 2026 Bridge Hack Wave — Three Protocols, $35.6M, One Day: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-08-13 17:17:48Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   F9coVJSc9brX…B5jRmb3rcopysha256 → base58

   verifying row…

   canonical bytes (26169 B) ▸

   {"actor":"system:backfill","investigation_id":"6a80ffa9-764c-4d6c-819b-2534f22d1540","kind":"publish","page_slug":"july-2026-bridge-hack-wave-three-protocols-35-6m-one-day","published_at":"2026-08-13T17:17:47.936Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"July 2026 Bridge Hack Wave — Three Protocols, $35.6M, One Day","sections":[{"content":"AFX Trade, an Arbitrum-based perpetuals exchange, lost approximately $24.15 million in USDC on July 22, 2026, after an attacker gained control of five of the protocol's seven bridge validator signing keys. Controlling those five keys provided 7,142 of the 6,667 voting units needed to authorize a withdrawal, allowing the attacker to drain the bridge through what the contract treated as a legitimate transaction following a 200-second dispute window. The stolen USDC was bridged to Ethereum and converted to approximately 12,467 ETH at an average price near $1,937 per token. After the exploit, AFX Trade publicly offered to let the attacker retain 30% of the stolen funds (approximately $7.2 million) as a bounty in exchange for returning the remaining 70%. Security analysts noted that the exploit did not break underlying cryptography or smart contract logic — the bridge executed as designed, with the critical failure occurring in the custody and distribution of off-chain validator private keys.","heading":"AFX Trade — $24.15M Validator Key Compromise","severity":"critical","sources":[{"credibility":1,"name":"Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised"},{"credibility":2,"name":"AFX Trade drained of $24M, offers hacker 30% bounty to return stolen funds","type":"news_article","url":"https://cryptobriefing.com/afx-trade-24m-exploit-hacker-bounty/"},{"credibility":2,"name":"AFX Trade offers exploiter $7.2M bounty to return 70% of stolen funds","type":"news_article","url":"https://cryptobriefing.com/afx-trade-exploiter-white-hat-deal/"},{"credibility":2,"name":"Arbitrum Perp DEX AFX Trade Drained of $24M, Offers Hacker 30% to Return It","type":"news_article","url":"https://decrypt.co/374133/arbitrum-perp-dex-afx-trade-drained-of-24m-offers-hacker-30-to-return-it"},{"credibility":2,"name":"AFX Trade Hack: Arbitrum Perp DEX Loses $24M as Bridge Keys Are Compromised","type":"news_article","url":"https://cryptoticker.io/en/afx-trade-hack-bridge-exploit-arbitrum/"},{"credibility":2,"name":"AFX Trade Loses $24M in Bridge Exploit, Offers Hacker 30% Bounty","type":"news_article","url":"https://www.kucoin.com/news/flash/afx-trade-loses-24m-in-bridge-exploit-offers-hacker-30-bounty"},{"credibility":2,"name":"Explained: The AFX Bridge Hack (July 2026) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-afxbridge-hack-july-2026"}]},{"content":"The Verus-Ethereum bridge was drained for approximately $7.54 million on July 23, 2026, in what security researchers confirmed was a repeat of the same vulnerability class exploited against the protocol in May 2026. According to Blockaid and CertiK, the attacker used the bridge's import path to trigger unbacked Ethereum-side payouts — a missing validation check that allowed the bridge to release more assets on Ethereum than were backed by matching deposits on the Verus chain. Assets drained included ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD, which were subsequently converted to approximately 3,916 ETH and transferred to Tornado Cash. The May 2026 exploit drained approximately $11.5 million using the same attack vector; that attacker later returned most funds after accepting a white-hat bounty, and the Verus team redeposited approximately $11.58 million of recovered funds back into the bridge on July 8. Security researchers noted that the underlying vulnerability was not patched before the redeployment, meaning the team effectively reloaded liquidity into a bridge carrying a known, documented weakness. As of reporting, both exploits targeted the same contract, the same transaction entry point, and the same class of logic flaw.","heading":"Verus Ethereum Bridge — $7.54M Repeat Import-Path Exploit","severity":"critical","sources":[{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"credibility":1,"name":"New Verus-Ethereum bridge attack drains $7.5 million through flaw used in May: Blockaid — The Block","type":"news_article","url":"https://www.theblock.co/post/409489/new-verus-ethereum-bridge-attack"},{"credibility":2,"name":"Verus Ethereum Bridge hacked again for $7.54M after May exploit — crypto.news","type":"news_article","url":"https://crypto.news/verus-ethereum-bridge-hacked-again-for-7-54m-after-may-exploit/"},{"credibility":2,"name":"Verus bridge hit by second exploit, flaw remains unfixed — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/verus-bridge-second-exploit-flaw-unfixed/"},{"credibility":2,"name":"Verus Ethereum Bridge Exploited Again for $7.54M in Repeat Attack — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/23/verus-ethereum-bridge-exploited-again-for-7-54m-in-repeat-attack/"},{"credibility":2,"name":"Verus-Ethereum bridge hacked again after two months — Digital Today","type":"news_article","url":"https://www.digitaltoday.co.kr/en/view/84881/verus-ethereum-bridge-hacked-again-after-two-months-754-million-assets-stolen"},{"credibility":3,"name":"Blockaid detection alert — @blockaid_ on X","type":"social_media","url":"https://x.com/blockaid_/status/2080143099561496896"}]},{"content":"B-Squared Network (B2 Network), a Bitcoin Layer 2 protocol on BNB Chain, suffered a loss of approximately $3.86 million on July 22, 2026, when an attacker exploited unauthorized access to the staking contract's upgrade authority. This administrative permission controls the behavior of the smart contract and, once obtained, allowed the attacker to drain 8.59 million B2 tokens without requiring any additional code exploit. Security analysts noted that the wallet conducting the drain had held privileged access since 2025, with permissions only revoked after the theft — a pattern analysts described as potentially consistent with insider access, though no formal attribution has been made. The attacker immediately converted the 8.59 million B2 tokens into 5,409 Wrapped BNB (approximately $3.01 million at the time), then bridged assets to Ethereum, swapping into ETH and USDT. Funds were subsequently routed through NEAR Intents and HOT Protocol in an apparent attempt to obscure the trail, with analysts tracking further movement toward Zcash. B-Squared suspended staking operations and offered to refrain from initiating legal proceedings if the attacker returned at least 10% of stolen funds within 24 hours as a gesture of goodwill. The team committed to fully compensating affected users regardless of recovery.","heading":"B-Squared Network — $3.86M Staking Contract Upgrade Authority Abuse","severity":"critical","sources":[{"credibility":2,"name":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"credibility":2,"name":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/two-ethereum-bridges-lose-31-7m-within-hours-as-third-protocol-halts-staking/"},{"credibility":2,"name":"B² Network Hit by 8.59M B2 Token Drain Worth $3.86M — CryptocurrencyHelp","type":"news_article","url":"https://cryptocurrencyhelp.com/news/b2-network-hit-by-8-59m-b2-token-drain-worth-3-86m/"}]},{"content":"All three exploits occurred within a roughly six-hour window on July 22–23, 2026, prompting security firm Blockaid to label the period 'Hackers Day.' No security firm or law enforcement body has publicly attributed the three incidents to a single threat actor or common attack infrastructure as of the date of this report. Each exploit used a distinct attack vector: AFX Trade via compromised validator signing keys (an off-chain key custody failure), Verus via a smart contract logic flaw in its bridge import path, and B-Squared via unauthorized access to an administrative contract upgrade key. While the simultaneity is notable, analysts have also observed that bridge protocols share a common architectural characteristic — concentrated pools of locked liquidity controlled by validator sets or administrative permissions — that makes them attractive targets regardless of coordination. The possibility of shared tooling, intelligence, or threat actors has not been ruled out, but had not been confirmed by any Tier 1 or Tier 2 source as of reporting.","heading":"Clustering and Possible Coordination","severity":"high","sources":[{"credibility":2,"name":"Three Crypto Bridge Hacks in DeFi Vanish $35.6M in One Day — Coinpedia","type":"news_article","url":"https://coinpedia.org/news/three-crypto-bridge-hacks-in-defi-vanish-35-6m-in-one-day/"},{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"credibility":2,"name":"DeFi loses $35M in a day: Are 'bounties' inviting more hacks? — Protos","type":"news_article","url":"https://protos.com/defi-loses-35m-in-a-day-are-bounties-inviting-more-hacks/"}]},{"content":"All three affected protocols used or offered some form of bounty or amnesty arrangement as a fund-recovery strategy. AFX Trade offered the attacker a 30% retention (~$7.2 million) in exchange for returning 70%, which is notably above the industry norm. B-Squared offered legal immunity in exchange for the return of at least 10%. Verus had previously paid a white-hat bounty of approximately 25% following the May 2026 exploit, after which recovered funds were redeposited into the still-unpatched bridge. Security commentators and outlets including Protos raised questions about whether publicly announced, generous bounty arrangements create an incentive structure that effectively rewards attackers and encourages further exploitation, particularly in cases like Verus where a known vulnerability remained unaddressed after an initial bounty-for-return arrangement.","heading":"Bounty Practices and Criticism","severity":"medium","sources":[{"credibility":2,"name":"DeFi loses $35M in a day: Are 'bounties' inviting more hacks? — Protos","type":"news_article","url":"https://protos.com/defi-loses-35m-in-a-day-are-bounties-inviting-more-hacks/"},{"credibility":2,"name":"AFX Trade offers exploiter $7.2M bounty to return 70% of stolen funds — CryptoBriefing","type":"news_article","url":"https://cryptobriefing.com/afx-trade-exploiter-white-hat-deal/"},{"credibility":2,"name":"Bounty Offer Reclaims $8.5M From Verus Bridge Exploit — CryptoBreaking","type":"news_article","url":"https://www.cryptobreaking.com/bounty-offer-reclaims-8-5m/"},{"credibility":2,"name":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"}]},{"content":"The three-protocol event was part of a broader surge in security incidents during July 2026. According to a monthly security report published by PANews, total losses from security incidents in July 2026 reached approximately $97 million, of which approximately $94 million was attributed to hacker attacks and contract vulnerabilities and approximately $3 million to phishing. The $97 million figure represented an approximately 18.7% increase over June's total. Cross-chain bridge attacks alone accounted for more than $35 million of July's total. Other significant July 2026 incidents identified in the PANews report included an Ostium oracle breach ($23.75 million), a BonkDAO governance exploit ($20 million), a Bonzo Lend oracle attack ($9.05 million), and a Summer.fi vault configuration error ($6.04 million). The broader H1 2026 period set records for both the number of crypto hack incidents and aggregate losses. Security firm Blockaid reported that crypto hack losses topped $1.1 billion across a record number of incidents in H1 2026, while Immunefi reported a slightly lower figure of below $1 billion using a different methodology. TRM Labs also noted H1 2026 as a record period for crypto hack incident volume.","heading":"Broader July 2026 Hack Context and Industry Losses","severity":"high","sources":[{"credibility":2,"name":"July Security Monthly Report: Total Losses Approximately $97 Million — PANews","type":"research","url":"https://panews.io/articles/019fc67f-accb-77ca-93b2-4e7507f44f2d"},{"credibility":2,"name":"Crypto Hacks Cross $1.1B in Record H1 2026 Losses: Blockaid — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/29/crypto-hacks-cross-1-1b-in-record-h1-2026-losses-blockaid/"},{"credibility":1,"name":"Crypto hack losses fall below $1 billion in H1 2026 despite record attack volume: Immunefi — The Block","type":"news_article","url":"https://www.theblock.co/post/407707/crypto-hack-losses-fall-below-1-billion-in-h1-2026-even-as-attack-volume-hits-record-immunefi"},{"credibility":1,"name":"Crypto hacks hit record high in H1 2026 as losses top $1 billion, Blockaid says — The Block","type":"news_article","url":"https://www.theblock.co/post/409944/crypto-hacks-hit-record-high-in-h1-2026-as-losses-top-1-billion-blockaid-says"},{"credibility":1,"name":"H1 2026 Crypto Hacks Reach Record High as Losses Fall Below USD 1 Billion — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/h1-2026-crypto-hacks-reach-record-high-as-losses-fall-below-usd-1-billion"}]},{"content":"All three attackers moved quickly to obscure or liquidate stolen funds using well-documented laundering techniques. The AFX Trade attacker converted $24.15 million in USDC to approximately 12,467 ETH via swaps on Ethereum. The Verus attacker converted stolen assets (ETH, tBTC, USDC, USDT, EURC, MKR, scrvUSD) into approximately 3,916 ETH and transferred them to Tornado Cash, a cryptocurrency mixing service commonly used to obscure blockchain transaction trails. The B-Squared attacker sold 8.59 million B2 tokens for 5,409 Wrapped BNB, bridged to Ethereum, swapped into ETH and USDT, and subsequently routed funds through NEAR Intents and HOT Protocol before analysts tracked movement toward Zcash. None of the three attack wallets have been publicly attributed to a named individual or group by law enforcement as of the date of this report.","heading":"Fund Flow and Laundering Patterns","severity":"high","sources":[{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"credibility":2,"name":"Verus-Ethereum bridge hacked again after two months, $7.54 million in assets stolen — Digital Today","type":"news_article","url":"https://www.digitaltoday.co.kr/en/view/84881/verus-ethereum-bridge-hacked-again-after-two-months-754-million-assets-stolen"},{"credibility":2,"name":"B² Network Hit by 8.59M B2 Token Drain Worth $3.86M — CryptocurrencyHelp","type":"news_article","url":"https://cryptocurrencyhelp.com/news/b2-network-hit-by-8-59m-b2-token-drain-worth-3-86m/"},{"credibility":3,"name":"Blockaid detection alert — @blockaid_ on X","type":"social_media","url":"https://x.com/blockaid_/status/2080143099561496896"}]}],"sources_used":[{"credibility":1,"name":"Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/bitcoin-ethereum-linked-protocols-lose-usd35-million-in-multiple-attacks-hours-apart"},{"credibility":1,"name":"New Verus-Ethereum bridge attack drains $7.5 million through flaw used in May: Blockaid — The Block","type":"news_article","url":"https://www.theblock.co/post/409489/new-verus-ethereum-bridge-attack"},{"credibility":1,"name":"Crypto hack losses fall below $1 billion in H1 2026 despite record attack volume: Immunefi — The Block","type":"news_article","url":"https://www.theblock.co/post/407707/crypto-hack-losses-fall-below-1-billion-in-h1-2026-even-as-attack-volume-hits-record-immunefi"},{"credibility":1,"name":"Crypto hacks hit record high in H1 2026 as losses top $1 billion, Blockaid says — The Block","type":"news_article","url":"https://www.theblock.co/post/409944/crypto-hacks-hit-record-high-in-h1-2026-as-losses-top-1-billion-blockaid-says"},{"credibility":1,"name":"H1 2026 Crypto Hacks Reach Record High as Losses Fall Below USD 1 Billion — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/h1-2026-crypto-hacks-reach-record-high-as-losses-fall-below-usd-1-billion"},{"credibility":1,"name":"Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised"},{"credibility":2,"name":"AFX Trade drained of $24M, offers hacker 30% bounty to return stolen funds — CryptoBriefing","type":"news_article","url":"https://cryptobriefing.com/afx-trade-24m-exploit-hacker-bounty/"},{"credibility":2,"name":"AFX Trade offers exploiter $7.2M bounty to return 70% of stolen funds — CryptoBriefing","type":"news_article","url":"https://cryptobriefing.com/afx-trade-exploiter-white-hat-deal/"},{"credibility":2,"name":"Arbitrum Perp DEX AFX Trade Drained of $24M, Offers Hacker 30% to Return It — Decrypt","type":"news_article","url":"https://decrypt.co/374133/arbitrum-perp-dex-afx-trade-drained-of-24m-offers-hacker-30-to-return-it"},{"credibility":2,"name":"Explained: The AFX Bridge Hack (July 2026) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-afxbridge-hack-july-2026"},{"credibility":2,"name":"AFX Trade Loses $24M in Bridge Exploit, Offers Hacker 30% Bounty — KuCoin","type":"news_article","url":"https://www.kucoin.com/news/flash/afx-trade-loses-24m-in-bridge-exploit-offers-hacker-30-bounty"},{"credibility":2,"name":"AFX Trade Hack: Arbitrum Perp DEX Loses $24M as Bridge Keys Are Compromised — CryptoTicker","type":"news_article","url":"https://cryptoticker.io/en/afx-trade-hack-bridge-exploit-arbitrum/"},{"credibility":2,"name":"Two Cross-Chain Bridges Hacked in One Day — Bitcoin Foundation","type":"news_article","url":"https://bitcoinfoundation.org/news/crimes-and-fraud-news/bridge-hacks-july/"},{"credibility":2,"name":"Verus Ethereum Bridge hacked again for $7.54M after May exploit — crypto.news","type":"news_article","url":"https://crypto.news/verus-ethereum-bridge-hacked-again-for-7-54m-after-may-exploit/"},{"credibility":2,"name":"Verus bridge hit by second exploit, flaw remains unfixed — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/verus-bridge-second-exploit-flaw-unfixed/"},{"credibility":2,"name":"Verus Ethereum Bridge Exploited Again for $7.54M in Repeat Attack — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/23/verus-ethereum-bridge-exploited-again-for-7-54m-in-repeat-attack/"},{"credibility":2,"name":"Verus-Ethereum bridge hacked again after two months — Digital Today","type":"news_article","url":"https://www.digitaltoday.co.kr/en/view/84881/verus-ethereum-bridge-hacked-again-after-two-months-754-million-assets-stolen"},{"credibility":2,"name":"Flagged Live: Attacker Flips $11.5M in Stolen Verus Assets to ETH — Bitcoin.com News","type":"news_article","url":"https://news.bitcoin.com/verus-ethereum-bridge-hack-11-million-tornado-cash-2026/"},{"credibility":2,"name":"Bounty Offer Reclaims $8.5M From Verus Bridge Exploit — CryptoBreaking","type":"news_article","url":"https://www.cryptobreaking.com/bounty-offer-reclaims-8-5m/"},{"credibility":2,"name":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","type":"news_article","url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"credibility":2,"name":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/two-ethereum-bridges-lose-31-7m-within-hours-as-third-protocol-halts-staking/"},{"credibility":2,"name":"B² Network Hit by 8.59M B2 Token Drain Worth $3.86M — CryptocurrencyHelp","type":"news_article","url":"https://cryptocurrencyhelp.com/news/b2-network-hit-by-8-59m-b2-token-drain-worth-3-86m/"},{"credibility":2,"name":"DeFi loses $35M in a day: Are 'bounties' inviting more hacks? — Protos","type":"news_article","url":"https://protos.com/defi-loses-35m-in-a-day-are-bounties-inviting-more-hacks/"},{"credibility":2,"name":"Three Crypto Bridge Hacks in DeFi Vanish $35.6M in One Day — Coinpedia","type":"news_article","url":"https://coinpedia.org/news/three-crypto-bridge-hacks-in-defi-vanish-35-6m-in-one-day/"},{"credibility":2,"name":"July Security Monthly Report: Total Losses Approximately $97 Million — PANews","type":"research","url":"https://panews.io/articles/019fc67f-accb-77ca-93b2-4e7507f44f2d"},{"credibility":2,"name":"Crypto Hacks Cross $1.1B in Record H1 2026 Losses: Blockaid — CryptoTimes","type":"news_article","url":"https://www.cryptotimes.io/2026/07/29/crypto-hacks-cross-1-1b-in-record-h1-2026-losses-blockaid/"},{"credibility":3,"name":"Blockaid detection alert — @blockaid_ on X","type":"social_media","url":"https://x.com/blockaid_/status/2080143099561496896"}],"summary":"On July 22–23, 2026, three separate cross-chain bridge protocols — AFX Trade, B-Squared Network, and Verus — were exploited within approximately six hours of each other for a combined loss of roughly $35.6 million. The incidents contributed to a July 2026 monthly total of approximately $97 million in crypto security losses and are part of a record-setting H1 2026 in which total hack losses surpassed $1 billion across the industry. No single threat actor has been publicly attributed to all three attacks, though the clustering prompted security firm Blockaid to label the period 'Hackers Day.'","timeline":[{"date":"2026-05-18","event":"Verus-Ethereum bridge suffers its first exploit, losing approximately $11.5 million via the same import-path vulnerability later used in July. The attacker subsequently accepts a white-hat bounty and returns most of the funds.","source":"Flagged Live: Attacker Flips $11.5M in Stolen Verus Assets to ETH Following Tornado Cash Setup — Bitcoin.com News","source_url":"https://news.bitcoin.com/verus-ethereum-bridge-hack-11-million-tornado-cash-2026/"},{"date":"2026-07-08","event":"Verus team redeposits approximately $11.58 million of recovered funds into the Ethereum bridge. The underlying import-path vulnerability was not patched before redeployment.","source":"Verus bridge hit by second exploit, flaw remains unfixed — Cryptopolitan","source_url":"https://www.cryptopolitan.com/verus-bridge-second-exploit-flaw-unfixed/"},{"date":"2026-07-22","event":"AFX Trade bridge exploited for $24.15 million in USDC after an attacker compromises five of seven validator signing keys. Funds bridged to Ethereum and converted to approximately 12,467 ETH.","source":"Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised — CoinDesk","source_url":"https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised"},{"date":"2026-07-22","event":"B-Squared Network staking contract exploited for 8.59 million B2 tokens ($3.86 million) via unauthorized access to the upgrade authority. Attacker immediately converts to BNB and bridges to Ethereum.","source":"B² Network Suffers $3.86M Exploit, Offers Attacker Legal Immunity For Partial Refund — Metaverse Post","source_url":"https://mpost.io/b%C2%B2-network-suffers-3-86m-exploit-offers-attacker-legal-immunity-for-partial-refund/"},{"date":"2026-07-23","event":"Verus-Ethereum bridge exploited for $7.54 million using the same import-path vulnerability as May 2026. Stolen assets converted to approximately 3,916 ETH and sent to Tornado Cash.","source":"New Verus-Ethereum bridge attack drains $7.5 million through flaw used in May: Blockaid — The Block","source_url":"https://www.theblock.co/post/409489/new-verus-ethereum-bridge-attack"},{"date":"2026-07-23","event":"AFX Trade publicly offers attacker a 30% bounty (~$7.2M) to return the remaining 70% of stolen funds. B-Squared offers legal immunity in exchange for return of at least 10%.","source":"AFX Trade offers exploiter $7.2M bounty to return 70% of stolen funds — CryptoBriefing","source_url":"https://cryptobriefing.com/afx-trade-exploiter-white-hat-deal/"},{"date":"2026-07-29","event":"Blockaid publishes H1 2026 report noting crypto hack losses exceeded $1.1 billion across a record number of incidents, with cross-chain bridge exploits among the leading attack vectors.","source":"Crypto Hacks Cross $1.1B in Record H1 2026 Losses: Blockaid — CryptoTimes","source_url":"https://www.cryptotimes.io/2026/07/29/crypto-hacks-cross-1-1b-in-record-h1-2026-losses-blockaid/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision ec792025-c6a1-453c-b19d-96500c9bb327copy