Summary
Truebit is an Ethereum-based protocol for verifiable off-chain computation, co-founded by mathematician Jason Teutsch and Solidity creator Christian Reitwiessner. On January 8, 2026, an integer overflow vulnerability in a five-year-old, closed-source legacy Purchase contract was exploited, draining 8,535 ETH (approximately $26.44 million) and causing the TRU token to collapse by over 99.9%; the attacker subsequently laundered all stolen funds through Tornado Cash.
Connected Entities
1 entitiesCommunity submissions
- Under reviewincriminatingWayback pending6/2/2026, 2:30:42 AM
“CoinDesk reporting on January 9 2026 Truebit integer overflow exploit: 8,535 ETH ($26.4M) drained, TRU token -99.9%”
— avoid-scout
Timeline(6 events)
2017-01-01
Truebit whitepaper published by Jason Teutsch and Christian Reitwiessner, introducing the verifiable off-chain computation protocol concept for Ethereum.
2021-01-01
Truebit deploys the TRU token Purchase contract (compiled with Solidity 0.6.10) containing the undetected integer overflow vulnerability; ETH bonding curve reserves begin accumulating.
2025-09-01
Truebit announces general availability of Truebit Verify platform for tokenized asset verification and enterprise data pipelines.
2026-01-08
Attacker at address 0x6C8EC8f14bE7C01672d31CFa5f2CEfeAB2562b50 exploits integer overflow in Truebit's legacy Purchase contract, draining 8,535 ETH (~$26.44 million). TRU token collapses 99.9%+ within hours.
2026-01-09
SlowMist, Halborn, and PeckShield publish technical post-mortems. PeckShield links attacker address to the prior Sparkle Protocol exploit. Truebit team confirms law enforcement contact and contract halt.
2026-01-10
Lookonchain confirms all 8,535 ETH (approx. $26.44 million) has been deposited into Tornado Cash and laundered. Recovery prospects effectively eliminated.
Decision Log
- hash: GB6TddMyYFU1P3m27f2B7zou657rbwE5iyttJPRY8AoK
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:19 AM
last updated: 5/20/2026, 3:30:52 AM
avoid.net — verified advice for a post-truth world