Skip to main content
AVOID.NET
Sign in

Verus Protocol Ethereum Bridge

avoid.net/verus-protocol-ethereum-bridge→20/100·85% conf.
[VERIFIED]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2L8rcv…uVoN

Summary

The Verus-Ethereum Bridge is a cross-chain infrastructure component enabling asset transfers between the Verus (VRSC) network and Ethereum. On May 18, 2026, the bridge was exploited for approximately $11.58 million through a business-logic validation flaw that allowed an attacker to withdraw far more value on the Ethereum side than was deposited on the Verus side. Following negotiations, the attacker returned approximately 75% of the stolen funds (4,052 ETH) in exchange for a 1,350 ETH bounty and an agreement to halt investigations.

Connected Entities

1 entities
Protocols
⌂Verus Protocol Ethereum Bridge
Relationships
    Have evidence about Verus Protocol Ethereum Bridge?
    0
    Accepted
    1
    Under review
    0
    Rejected / revoked

    Community submissions

    Timeline(7 events)

    16 May 2026

    Verus released emergency update version 1.2.14-2, described as an 'urgent and mandatory' vulnerability fix. The relationship between this patch and the subsequent exploit has not been publicly clarified.

    Cryptopolitan

    17 May 2026

    Attacker's Ethereum wallet funded with 1 ETH via Tornado Cash, approximately 14 hours before the exploit was executed.

    Bitcoin.com News

    18 May 2026

    Attacker submitted a forged cross-chain export containing approximately 0.02 VRSC (~$0.01) with an empty source-side total. Notaries signed the state root. The submitImports() function on Ethereum released 103.6 tBTC, 1,625 ETH, and ~147,000 USDC due to a missing input/output amount check in checkCCEValues.

    Halborn

    18 May 2026

    Blockaid detected suspicious activity at approximately 00:54 GMT and flagged the Verus-Ethereum Bridge contract as under active exploit.

    CoinDesk

    18 May 2026

    PeckShield confirmed the theft. Attacker consolidated all stolen assets into approximately 5,402.4 ETH (~$11.4 million) in wallet 0x65Cb8b128Bf6e690761044CCECA422bb239C25F9.

    CoinDesk

    18 May 2026

    Approximately 12 hours after the initial exploit, the Verus Layer 1 blockchain halted block production as most block-generating nodes took themselves offline.

    Protos

    22 May 2026

    After direct negotiations, the exploiter returned 4,052.4 ETH (~$8.5 million, or approximately 75% of stolen funds) to Verus team wallet 0xF9AB...C1A74. The attacker retained 1,350 ETH (~$2.8 million) as a negotiated bounty. Verus agreed to halt all investigations.

    CoinTelegraph
    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain15 Wayback Archives

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (4 events). 15 of 17 cited source URLs have an Internet Archive snapshot.

    Fact-checked 2026-09-0726 claims checked2 corrections pending0 applied⛓ anchoredSee findings →
    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 6/14/2026, 5:08:39 PM

    last updated: 7/26/2026, 11:10:23 PM

    2 views

    avoid.net — verified advice for a post-truth world