Taiko L2 Bridge Exploit June 2026
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·5PLuAK…HCDzSummary
On June 21–22, 2026, Taiko — an Ethereum-equivalent Layer-2 rollup — suffered a bridge exploit in which an attacker drained approximately $1.7 million (roughly 870 ETH and 1.99 million TAIKO tokens) by forging cross-chain withdrawal proofs using an SGX enclave signing key that had been publicly committed to the taikoxyz/raiko GitHub repository. The team halted block production, froze bridge and ERC20Vault contracts, and pledged full 1:1 recollateralization before reopening. The incident is part of a broader 2026 pattern of bridge exploits totaling over $340 million across 14+ incidents.
Connected Entities
10 entities · 60 linked investigations- Gravity Bridge→mentioned with→Ethereum(80%)
- Gravity Bridge→mentioned with→Kelp(65%)
- Taiko→mentioned with→Ethereum(80%)
- Taiko→mentioned with→Loopring(70%)
- Taiko→mentioned with→MEXC(70%)
- Taiko L2 Bridge Exploit June 2026→mentioned with→MEXC(65%)
- Taiko L2 Bridge Exploit June 2026→mentioned with→Taiko(70%)
- Taiko L2 Bridge Exploit June 2026→mentioned with→Loopring(60%)
- Taiko L2 Bridge Exploit June 2026→mentioned with→Ethereum(80%)
- Taiko L2 Bridge Exploit June 2026→mentioned with→Kelp(60%)
- + 15 more
Community submissions
“Root-cause confirmation (leaked GitHub key, not contract bug) and Taiko's commitment to fully recollateralize and make users whole.”
— avoid-scout
Timeline(9 events)
21 June 2026
Attacker begins exploiting Taiko's bridge using leaked SGX enclave signing key (enclave-key.pem) from the public taikoxyz/raiko GitHub repository to forge withdrawal proofs.
SpotedCrypto, Thirdweb22 June 2026
Blockaid detects the exploit in real time. Approximately 870 ETH and 1.99 million TAIKO tokens are drained from the L1 Bridge and ERC20Vault contracts on Ethereum mainnet.
CoinDesk22 June 2026
Attacker moves approximately 1.99 million TAIKO tokens to an address on MEXC exchange.
CryptoTimes22 June 2026
Taiko activates Security Council multisig; Bridge and ERC20Vault contracts frozen. Block production halted by proposers. Exploit contained by approximately 2:08 a.m. ET.
Taiko official X account (taikoxyz)22 June 2026
Taiko issues public advisory urging all users to withdraw funds from every bridge on the network; requests centralized exchanges suspend TAIKO deposits.
Decrypt22 June 2026
Upbit and Bithumb suspend TAIKO deposits and withdrawals. TAIKO token falls 10–20%, touching an all-time low near $0.07.
MEXC News, CoinCodex22 June 2026
Recovery pull request #21820 ('port hack recovery hooks to v3') opened on the taikoxyz GitHub, bundling checkpoint versioning, Inbox state reset, bridge message invalidation, and QuotaManager restoration.
SpotedCrypto25 June 2026
Taiko confirms that no user will lose funds and announces full 1:1 bridge recollateralization before reopening. Taiko's CEO files a formal report with Singapore authorities.
CryptoTimes28 June 2026
Taiko publishes a four-step restart plan: deploy and audit fixes, recollateralize bridge 1:1, restore L2 activity, then reopen bridge under Security Council approval.
crypto.newsDecision Log
- hash: H29q2LH7xjdj6RyQq2WD39LoppcTyEfoLifPX1LEHHuQ
- hash: G1gsDSHi6Dg9sJYVtGSNUtm1AWVWk7dQLStTf815yUDw
- hash: EA31PwyJe9CSezvPMw8RcHbMN2a9KntD4TqvdqqXZjoR
- hash: EmTLa4D6KVJ9KUf2eRd6pMAF7Yxx9ce2qFtCDwimcxGz
This investigation is cryptographically anchored to the Solana blockchain (4 events). 19 of 20 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 6/29/2026, 12:14:27 PM
last updated: 8/26/2026, 8:08:38 AM
4 viewsavoid.net — verified advice for a post-truth world