Skip to main content
Sign in

Verus Protocol (VRSC)

avoid.net/verus-protocol-vrsc→21/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Summary

Verus Protocol (VRSC) is an open-source, privacy-focused Layer 1 blockchain launched in May 2018 by Michael J. Toutonghi, a former Microsoft Technical Fellow and architect of the .NET framework. Its Ethereum cross-chain bridge suffered two exploits in 2026 — $11.58M on May 18 and $7.54M on July 23 — both caused by the same unpatched source-amount validation flaw in the bridge's import path. The project's decision to reopen the bridge and redeposit reserves on July 8 without a confirmed full patch or independent audit directly enabled the repeat attack, raising significant concerns about security governance.

Connected Entities

1 entities
Protocols
⌂Verus Protocol (VRSC)
Relationships
    Have evidence about Verus Protocol (VRSC)?

    Timeline(5 events)

    2018-05-01

    Verus Protocol (VRSC) launches with a fair launch — no ICO, no premine, no developer fees. Founded by Michael J. Toutonghi and co-founders.

    IQ.wiki: Verus

    2026-05-18

    Attacker exploits missing source-amount validation in the Verus-Ethereum Bridge's checkCCEValues function, draining 1,625 ETH, 103.57 tBTC, and 147,000 USDC — a total of approximately $11.58 million. Assets consolidated into 5,402 ETH at wallet 0x65Cb8b128Bf6e690761044CCECA422bb239C25F9.

    CoinDesk: Verus-Ethereum bridge loses $11 million

    2026-05-22

    After public on-chain negotiation by the Verus team, the May attacker returns 4,052 ETH (approximately $8.5 million) and retains 1,350 ETH (approximately $2.8 million) as a white-hat bounty — representing approximately 75% recovery.

    The Block: Verus bridge exploiter returns 4,052 ETH

    2026-07-08

    Bridge reserves are redeposited, effectively reopening the Verus-Ethereum Bridge to user funds. No confirmed full patch or independent audit had been publicly announced prior to this reopening.

    Crypto.news: Verus Ethereum Bridge hacked again for $7.54M

    2026-07-23

    A second attacker exploits the same submitImports entry path and bug class, draining approximately $7.54 million in ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from the bridge. Assets consolidated to approximately 3,916 ETH and partially routed through Tornado Cash. Attacker EOA: 0xBda71b58cEc0b1C20A8f87cCD52FA0679747855c.

    The Block: New Verus-Ethereum bridge attack drains $7.5 million
    Provenance & Audit Trail
    11 Wayback Archives

    Decision Log

    • #1publish⛓ pending8/6/2026, 5:12:40 PM
      hash: 77BJ3kn2m14Niowqx7ZnVJjpirCMXPLchUtCjbDQFRoe

    11 of 15 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 8/6/2026, 5:12:32 PM

    last updated: 8/6/2026, 7:58:16 PM

    avoid.net — verified advice for a post-truth world