Taiko
Last changed 2026-10-16 · Community evidence — A moderator accepted a piece of community-submitted evidence: The Defiant confirms an attacker forged withdrawal proofs using an RSA-3072 private key accidentally committed to Taiko's public raiko GitHub repo, draining $1.7M from L1 bridge contracts and forcing a halt in block production. Matches the note. Trust score now 52. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -9.2 |
| Incidents it suffered (e.g. hacks) | -13.2 |
| Problems around it, caused by others | -1.8 |
| Long-running | +8 |
| Recent unresolved incident | -5.9 |
| Sum | 43 |
Score: 52/100 (kept between 0 and 100)
How scoring works →Summary
Taiko (ticker: TAIKO) is an Ethereum-equivalent, based contestable ZK-rollup Layer 2 developed by Taiko Labs, founded in 2022 by Daniel Wang, former founder of Loopring. The protocol launched on Ethereum mainnet on May 27, 2024 and raised $37 million in total funding. On June 22, 2026, an attacker exploited a critical operational security failure — an SGX RSA-3072 private signing key committed to a public GitHub repository — to forge valid L2 state attestations and drain approximately $1.7 million from the L1 Bridge and ERC20Vault contracts; Taiko halted block production, paused all bridge withdrawals, and pledged full treasury-backed reimbursement to affected users.
Incidents (1)
- Taiko Bridge SGX Key Exploit (June 2026)added 2026-07-29
Connected Entities
8 entities · 60 linked investigations- Wintermute→mentioned with→Ethereum(70%)
- Taiko→mentioned with→Wintermute(60%)
- Taiko→mentioned with→Ethereum(80%)
- Taiko→mentioned with→Flow(60%)
- Taiko→mentioned with→Loopring(70%)
- Taiko→mentioned with→MEXC(70%)
- Flow→mentioned with→Ethereum(80%)
- Ethereum→mentioned with→Vitalik Buterin(80%)
- MEXC→mentioned with→MEXC Exchange(80%)
- Taiko→mentioned with→Vitalik Buterin(80%)
- + 5 more
Community submissions
“[Scout] The Defiant reports that an attacker forged withdrawal proofs using an RSA-3072 private key accidentally committed to Taiko's public raiko GitHub repository, draining $1.7 million from L1 bridge contracts and forcing the protocol to halt block production and urge all users to exit.”
— avoid-scout(unverified)
Timeline(10 events)
March 2022
Taiko Labs founded by Daniel Wang, former CEO and founder of Loopring.
Crunchbase / Gate.com2 March 2024
Taiko Labs closes $15 million Series A led by Lightspeed Faction, bringing total funding to $37 million.
PRNewswire22 May 2024
Taiko announces genesis airdrop of up to 5% of TAIKO token supply (50 million tokens) to over 300,000 community members.
The Block27 May 2024
Taiko launches on Ethereum mainnet as the first based rollup, with Vitalik Buterin submitting the inaugural block.
The Block2025
A critical vulnerability in Plonky3 (a dependency of SP1, one of Taiko's ZK prover backends) is publicly disclosed; patched by Succinct in SP1 v4 (Turbo). Taiko's multi-proof architecture was credited with limiting the impact.
Blockworks22 June 2026
Exploit occurs: attacker uses publicly exposed SGX RSA-3072 signing key (enclave-key.pem in taikoxyz/raiko GitHub repository) to forge valid L2 state attestations, drain the L1 Bridge and ERC20Vault of approximately $1.7 million, and move ~1.99 million TAIKO tokens to MEXC.
The Defiant / CoinDesk / Crypto Times22 June 2026
Taiko halts block production, pauses L1 Bridge and ERC20Vault withdrawals via Security Council 7-of-9 multisig, requests exchanges freeze TAIKO deposits, and publishes attacker wallet addresses. TAIKO token drops over 10%.
CoinDesk22 June 2026
Four pull requests labeled respond-to-hack merged into Taiko's codebase within 24 hours; PR #21820 addresses signing infrastructure changes.
Thirdweb Blog25 June 2026
Taiko publishes update confirming no user funds will be lost, pledging to fully recollateralize the bridge 1:1 before reopening. CEO files formal report with Singapore authorities. No specific reopening date announced.
Crypto TimesDecision Log
- slot 457753980 · hash 55AoFBAnreQbBBssZe8ZBjPLpjmrbANxN9LdVTN1MmQs
- slot 455366738 · hash 724nGr869j4UjB6ADbrsUSp9AvnYuxwJcqE4YZuwC7HT
- slot 443526667 · hash 5QpTwsowauZNh1Yj7tagb9LF73rZaLyZmwMLyaAjXbty
- slot 443526568 · hash 2sLKgSNWNkuJTsuTzcUoKZgXApzAMuntm9iFDepuXvcK
- slot 429279214 · hash Dot4opyUJQHtCTaJ2YkWebQ4CTf9RjQ54Jf4qjGrdM7T
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 17 of 20 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 6/27/2026, 5:13:26 PM
last updated: 10/16/2026, 7:28:29 PM
3 viewsavoid.net — verified advice for a post-truth world