Taiko Ethereum L2 Bridge Exploit
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·4gYZ9w…HTpvSummary
On June 22, 2026, an attacker drained approximately $1.7 million from the Taiko Ethereum layer-2 bridge and ERC-20 vault by exploiting a leaked Intel SGX RSA-3072 signing key that had been publicly committed to the taikoxyz/raiko GitHub repository. The attacker used the key to register as a legitimate prover, forge L2 state attestations, and submit withdrawal requests on Ethereum with no matching deposits on Taiko, causing the bridge contracts to release funds against fraudulent proofs. Taiko halted block production and froze bridge withdrawals within approximately eight minutes of the attack being detected by Blockaid's monitoring system.
Connected Entities
5 entities · 60 linked investigations- Taiko Ethereum L2 Bridge Exploit→mentioned with→Ethereum(80%)
- Taiko Ethereum L2 Bridge Exploit→mentioned with→MEXC(70%)
- Taiko Ethereum L2 Bridge Exploit→mentioned with→Taiko(70%)
- Taiko→mentioned with→Ethereum(80%)
- Taiko→mentioned with→MEXC(70%)
- MEXC→mentioned with→MEXC Exchange(80%)
- Taiko Ethereum L2 Bridge Exploit→mentioned with→MEXC Exchange(80%)
- Taiko→mentioned with→MEXC Exchange(80%)
- MEXC Exchange→mentioned with→MEXC(70%)
Community submissions
“CoinDesk primary report confirming the June 22 2026 SGX key-leak exploit draining $1.7M and forcing a full Taiko network halt”
— avoid-scout
Timeline(7 events)
22 June 2026
Attack begins: attacker uses leaked SGX RSA-3072 signing key from taikoxyz/raiko GitHub repository to register as a legitimate prover and begin submitting forged withdrawal proofs. Approximately $1.7 million drained from L1 Bridge and ERC20Vault contracts.
CoinDesk22 June 2026
Blockaid's automated monitoring system detects the exploit in real time. Taiko halts block production and freezes L1 Bridge and ERC20Vault withdrawals by approximately 2:08 a.m. ET — roughly eight minutes after the attack began.
SpotedCrypto22 June 2026
Taiko publicly urges all users to withdraw funds from all bridges deployed on the chain, requests exchanges suspend TAIKO deposits, and activates the Security Council multisig governance body.
CoinDesk22 June 2026
Alleged attacker moves approximately 2 million TAIKO tokens (approximately $170,000) to a MEXC exchange account before the full freeze takes effect.
Thirdweb Blog22 June 2026
TAIKO token price falls approximately 10–20% intraday, reaching an alleged all-time low of approximately $0.07294.
Invezz22 June 2026
Recovery pull request #21820 ('feat(protocol): port hack recovery hooks to v3') opened at 17:09 UTC against the v3.0.0 protocol branch with four structural fixes: checkpoint versioning, Inbox state reset, bridge-message invalidation, and QuotaManager restoration.
SpotedCrypto22 June 2026
Taiko identifies root cause and confirms fix implementation is underway. Team commits to publishing a full incident post-mortem. PR #21820 remains open and unmerged; bridge reopening pending merge, post-merge security review, and Security Council multisig approval.
CryptoTimesDecision Log
- hash: Vw1GyEV5RPQnZfE5roqR4fhwaBzsvajpzyJoCGxrYTa
- hash: 4S5u9jRdcLffWxH3shqewZThmJPPHA7z993TvM6mogAq
- hash: DfJWA8Aq4oZp7yW6fPWc1RtZQxinYhqztydiWooijZtm
- hash: 8yHQj4Suzb8o8mSGkZ7VMwkJcQZ5D9TvYsZfmDw31VvQ
This investigation is cryptographically anchored to the Solana blockchain (4 events). 14 of 15 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/23/2026, 11:03:33 PM
last updated: 8/10/2026, 6:28:49 PM
4 viewsavoid.net — verified advice for a post-truth world