June 2026 Cross-Chain Bridge Exploit ($127M, Three Protocols)
Last changed 2026-10-28 · Fact-check review — Fact-check review (verdict: approve): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·4YjQCk…jF26Summary
An alleged coordinated cross-chain bridge exploit on June 14, 2026 is described as draining $127 million from three DeFi protocols, named only as BridgeLink, CrossFlow and Relay Protocol, across Ethereum, Arbitrum and Polygon in about 12 minutes. The claim rests on a single blog post by Nadcab Labs, an Indian blockchain development services firm, and no Tier 1 or Tier 2 outlet, analytics database or security firm has corroborated it; several details are inconsistent with verifiable facts. Verified bridge incidents in June 2026 were much smaller: Humanity Protocol (about $30.8M), Syscoin (about 5 billion SYS minted, worth roughly $9–10M, fully returned and burned) and Taiko (about $1.7M). The largest verified 2026 bridge exploit was KelpDAO in April (about $292M), which one analysis suggests may have been the source of the inflated figure.
Connected Entities
28 entities · 60 linked investigations- Taiko Ethereum L2 Bridge Exploit→mentioned with→Ethereum(80%)
- Syscoin→mentioned with→Bitcoin(80%)
- Syscoin→mentioned with→Ethereum(65%)
- KelpDAO Bridge Exploit (April 2026)→mentioned with→THORChain(65%)
- June 2026 Cross-Chain Bridge Exploit ($127M)→mentioned with→Syscoin(80%)
- KelpDAO Bridge Exploit (April 2026)→mentioned with→Arbitrum(80%)
- Syscoin→mentioned with→Hyperbridge(60%)
- Taiko Ethereum L2 Bridge Exploit→mentioned with→Taiko(70%)
- June 2026 Cross-Chain Bridge Exploit ($127M)→mentioned with→Bitcoin(60%)
- Wintermute→mentioned with→Ethereum(70%)
- + 122 more
Connected Through
23 shared actors · 579 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Ethereumorganization
- ♦Bitcointoken
- □Arbitrumorganization
- □Polygonorganization
1 submission awaiting moderator review.
Timeline(15 events)
February 2022
Wormhole bridge hack: about 120,000 wETH (~$320–325M) stolen via a signature verification bypass. This is the actual 'Wormhole incident'; it did not occur in 2026.
Elliptic / ChainalysisApril 2026
KelpDAO bridge exploited for about $292M in rsETH (dated April 18 on one page and April 19 on another); the largest verified bridge exploit of 2026.
CoinDeskApril 2026
LayerZero publishes post-mortem attributing the KelpDAO exploit with preliminary confidence to Lazarus Group/TraderTraitor and blaming Kelp's 1-of-1 DVN verifier configuration.
CoinDeskMay 2026
Verus-Ethereum bridge exploited for about $11.4M via missing source-amount validation in Solidity bridge logic.
CoinDeskJune 2026
Syscoin bridge exploit: malformed SPV proof mints about 5 billion unauthorized SYS (~$8.56–10M); bridge suspended.
CryptoTimesJune 2026
Syscoin publicly discloses the exploit; GoPlus Security confirms the vulnerability; SYS drops about 20%.
CryptopolitanJune 2026
Humanity Protocol: malware-stolen keys used to drain about $30–36M from a Hyperlane bridge ProxyAdmin on Ethereum; H token falls 80–90%.
CoinDeskJune 2026
Syscoin team contacts the attacker on-chain with a recovery address and opens a private bounty discussion.
Rekt NewsJune 2026
Alleged coordinated exploit at 03:42 UTC drains $127M from BridgeLink ($52M), CrossFlow ($48M) and Relay Protocol ($27M) across Ethereum, Arbitrum and Polygon. Asserted only by Nadcab Labs; unverified.
Nadcab Labs (unverified; Tier 3 only)June 2026
Syscoin publishes its technical postmortem; returned SYS destroyed via OP_RETURN burn; bridge remains paused pending audit.
CoinSpotJune 2026
Nadcab Labs publishes the blog post describing the alleged $127M exploit; no corroborating coverage identified.
Nadcab LabsJune 2026
Taiko L2 bridge exploit: a private key leaked on GitHub enables about $1.7M in forged withdrawal proofs; Taiko halts block production.
CoinDeskDecision Log
- slot 462279526 · hash 8VAfBj6VDjgVu5KksvR2fPPeAAYpChHs8nccB729ewAj
- slot 462279520 · hash QsKMvU7LwwkpeTrDydNcDhnDPr9qqdDpjVoxvrVfRHm
- slot 457473853 · hash HEXiLjDLpALVA1dGakPyCnhuVWkVb4UTeSTSKUhcFAXe
- slot 443519551 · hash C8xGby9xYN9Dd7JMAr8699WFHjSz9irzy636m6ajVnTt
- slot 443519548 · hash 9rJ2WRH4fVcNmSn7bVqU9EWPxPPTTTWdRMARuEWEv8o1
- slot 429875105 · hash DHnRf5Cg15Yq4AzeNtnkKZfuD5y5hSGHg9EhRFZUA8N6
This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 35 of 36 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 6/30/2026, 12:06:00 PM
last updated: 10/28/2026, 12:48:48 AM
8 viewsavoid.net — verified advice for a post-truth world