Skip to main content
AVOID.NET

Verus Protocol (VRSC)

avoid.net/verus-protocol-vrsc21/100·82% conf.
[VERIFIED]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·ecmggi…jPwq

Summary

Verus Protocol (VRSC) is an open-source, privacy-focused Layer 1 blockchain launched in May 2018 by Michael J. Toutonghi, a former Microsoft Technical Fellow and architect of the .NET framework. Its Ethereum cross-chain bridge suffered two exploits in 2026 — $11.58M on May 18 and $7.54M on July 23 — both caused by the same unpatched source-amount validation flaw in the bridge's import path. The project's decision to reopen the bridge and redeposit reserves on July 8 without a confirmed full patch or independent audit directly enabled the repeat attack, raising significant concerns about security governance.

Connected Entities

4 entities · 60 linked investigations
Organizations
Ethereum64Wormhole
Protocols
Verus Protocol (VRSC)Verus Protocol
Relationships
  • Verus Protocol (VRSC)mentioned withWormhole(65%)
  • Verus Protocol (VRSC)mentioned withEthereum(80%)
  • Verus Protocolmentioned withEthereum(80%)
  • Verus Protocolmentioned withWormhole(65%)
  • Verus Protocol (VRSC)mentioned withVerus Protocol(80%)
  • Wormholementioned withEthereum(70%)
Have evidence about Verus Protocol (VRSC)?

Timeline(5 events)

May 2018

Verus Protocol (VRSC) launches with a fair launch — no ICO, no premine, no developer fees. Founded by Michael J. Toutonghi and co-founders.

IQ.wiki: Verus

18 May 2026

Attacker exploits missing source-amount validation in the Verus-Ethereum Bridge's checkCCEValues function, draining 1,625 ETH, 103.57 tBTC, and 147,000 USDC — a total of approximately $11.58 million. Assets consolidated into 5,402 ETH at wallet 0x65Cb8b128Bf6e690761044CCECA422bb239C25F9.

CoinDesk: Verus-Ethereum bridge loses $11 million

22 May 2026

After public on-chain negotiation by the Verus team, the May attacker returns 4,052 ETH (approximately $8.5 million) and retains 1,350 ETH (approximately $2.8 million) as a white-hat bounty — representing approximately 75% recovery.

The Block: Verus bridge exploiter returns 4,052 ETH

8 July 2026

Bridge reserves are redeposited, effectively reopening the Verus-Ethereum Bridge to user funds. No confirmed full patch or independent audit had been publicly announced prior to this reopening.

Crypto.news: Verus Ethereum Bridge hacked again for $7.54M

23 July 2026

A second attacker exploits the same submitImports entry path and bug class, draining approximately $7.54 million in ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from the bridge. Assets consolidated to approximately 3,916 ETH and partially routed through Tornado Cash. Attacker EOA: 0xBda71b58cEc0b1C20A8f87cCD52FA0679747855c.

The Block: New Verus-Ethereum bridge attack drains $7.5 million
Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (3 events). 15 of 15 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 8/6/2026, 5:12:32 PM

last updated: 8/26/2026, 12:03:57 AM

4 views

avoid.net — verified advice for a post-truth world