Shibarium Bridge Flash Loan Exploit (September 2025)
Last changed 2026-10-27 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 22 to 14. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·2PQhqs…dfszSummary
On September 12, 2025, the Shibarium Ethereum bridge was exploited after an attacker used a flash loan of 4.6 million BONE to seize a supermajority of validator signing power and push fraudulent checkpoints, draining assets reported at $2.4 million initially and about $4.1 million across 17 tokens in later accounts. The Shiba Inu team paused staking, rotated validator keys, recovered the borrowed BONE and reopened the BONE Plasma Bridge on October 14, 2025 with a seven-day withdrawal delay and blacklist; a phased user compensation plan was announced but not distributed at relaunch. A duplicate page was filed under a September 2026 date, but all verifiable sources date the incident to September 2025.
Connected Entities
2 entitiesTimeline(10 events)
September 2025
Exploit executed at about 18:44 UTC: flash-loaned 4.6M BONE delegated to Ryoshi Validator 1, 10-of-12 validator control, fraudulent checkpoints and bridge drain (September 12).
Vibranium Audits post-incident report; crypto.news; BlockonomiSeptember 2025
Developers paused staking and unstaking, freezing the attacker's BONE, moved stake manager funds to a 6-of-9 multisig and revoked bridge access (September 12).
The Shib DailySeptember 2025
Kaal Dhairya posts a security update calling the attack "sophisticated" and "probably planned for months"; Hexens, Seal 911 and PeckShield engaged (September 13).
Kaal Dhairya on XSeptember 2025
BONE reportedly surges about 40% on news of the network pause before correcting; SHIB up 4.5% (September 13). Another account says the BONE was recovered by freezing staking on September 13.
CoinDeskSeptember 2025
Shib team offers a 50 ETH bounty and no prosecution if funds are returned; attacker moves assets without responding (September 16).
The Shib DailySeptember 2025
Official @Shibtoken community update confirms attack vector, 17 tokens affected and the key-compromise hypothesis (September 17).
Shibtoken on XSeptember 2025
Attacker's wallet liquidates 1.01 billion SHIB for about 2.9 ETH (September 20).
CoinSpeaker; The Crypto BasicSeptember 2025
Attacker sells final 2,057 BAD for about 3.2 ETH; Kaal Dhairya confirms negotiations failed (September 22).
CoinSpeaker; The Crypto BasicOctober 2025
CoinCentral reports 4.6M BONE recovered via corrected unbonding, all validator keys rotated and over 100 contracts migrated (October 3).
CoinCentralOctober 2025
BONE Plasma Bridge reactivated with seven-day withdrawal delay, blacklist and Hexens audit; compensation plan for about 1,200 wallets announced but not distributed (October 14).
The Shib DailyDecision Log
- slot 461973581 · hash HcRT5iwNavUeBoGRZB6S2G96eaxdLG9ugHtSdsGHXrBd
- slot 461973575 · hash CSLhkzJR8VvRjaSDST26pJL91rQNbvFTx1it3QeYmW6V
- slot 450023889 · hash CmYZDpm4DC8G6HjiQYTjmREhheAaqo4uCkmegdJ7AuCe
This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 26 of 35 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 9/24/2026, 12:05:48 PM
last updated: 10/27/2026, 6:44:22 AM
4 viewsavoid.net — verified advice for a post-truth world