Taiko Ethereum L2 Bridge
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·5MVva1…yna1Summary
On June 22, 2026, Taiko — an Ethereum-equivalent layer-2 rollup — suffered a bridge exploit in which an attacker drained approximately $1.7 million from its L1 Bridge and ERC-20 vault by using an RSA-3072 Intel SGX signing key that had been committed in plaintext to the public taikoxyz/raiko GitHub repository. The attacker used the key to register as a legitimate prover, forge L2 state attestations, and execute fraudulent withdrawal transactions on Ethereum with no corresponding deposits on Taiko's chain. Taiko halted block production network-wide, froze affected contracts, and urged all users to exit every bridge on the network within approximately eight minutes of the attack being detected by Blockaid's monitoring system.
Connected Entities
5 entities · 60 linked investigations- Taiko→mentioned with→Ethereum(80%)
- Taiko→mentioned with→MEXC(70%)
- Taiko Ethereum L2 Bridge→mentioned with→MEXC(70%)
- Taiko Ethereum L2 Bridge→mentioned with→Ethereum(80%)
- Taiko Ethereum L2 Bridge→mentioned with→Taiko(70%)
- MEXC→mentioned with→MEXC Exchange(80%)
- Taiko Ethereum L2 Bridge→mentioned with→MEXC Exchange(80%)
- Taiko→mentioned with→MEXC Exchange(80%)
- MEXC Exchange→mentioned with→MEXC(70%)
Community submissions
“Taiko fully restored its cross-chain bridge on July 2, 2026 — 10 days after the $1.7M exploit — following an independent security review. CoinDesk confirmed bridge reopening July 2, 2026. Taiko's token rose 136% post-recovery, suggesting market confidence in the fix. Update is relevant to the existing taiko-ethereum-l2-bridge page.”
— avoid-scout
Timeline(7 events)
22 June 2026
Attack begins: attacker uses leaked Intel SGX RSA-3072 enclave-key.pem from the public taikoxyz/raiko GitHub repository to register a rogue prover and begin submitting forged withdrawal proofs on Ethereum. Approximately $1.7 million drained from L1 Bridge and ERC20Vault contracts.
CoinDesk22 June 2026
Blockaid's automated monitoring system detects the exploit in real time. Taiko halts block production and freezes L1 Bridge and ERC20Vault withdrawals by approximately 2:08 a.m. ET — roughly eight minutes after the attack began.
SpotedCrypto22 June 2026
Taiko publicly urges all users to withdraw funds from all bridges deployed on the chain, requests centralized exchanges suspend TAIKO deposits, and activates the Security Council multisig governance body.
CoinDesk / BanklessTimes22 June 2026
Alleged attacker moves approximately 2 million TAIKO tokens (approximately $170,000) to a MEXC exchange account before the full freeze takes effect.
Thirdweb Blog / CryptoTimes22 June 2026
TAIKO token price falls approximately 10–20% intraday, with multiple outlets reporting an all-time low near $0.073.
CoinCodex22 June 2026
Recovery pull request 21820 opened at 17:09 UTC against the v3.0.0 protocol branch with four structural fixes: checkpoint versioning, Inbox state reset, bridge-message invalidation, and QuotaManager restoration.
SpotedCrypto23 June 2026
Additional security analysis published by TechTimes and other outlets confirming the SGX trust model was defeated by the plaintext key commit. Ledger CTO comments publicly attributing root cause to operational key management failure.
TechTimes / IncryptedDecision Log
- hash: 2PqAKECVxKbB3zuH5M3975yQbM8fpYPHcnUyXztosJn3
- hash: 6iiip3h2KWAMQLnDWxcj6v9WPhTEuxCveuMamrtREYJr
- hash: E84pwH16F2R3a9ChbyxaiRyTDpJyEDmLoGKttFV3jr68
- hash: eVrVUzp5gEpTzt8xZXwpk2hKtRMq5MSaLYQfDJi8THu
This investigation is cryptographically anchored to the Solana blockchain (4 events). 16 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 6/25/2026, 11:08:02 PM
last updated: 8/10/2026, 6:40:26 PM
4 viewsavoid.net — verified advice for a post-truth world