Verus–Ethereum Bridge Exploited for More Than $11 Million

Blockaid says the cross-chain bridge attack resembled earlier exploits such as Wormhole and Nomad, with the reported weakness tied to verification that did not properly confirm source-chain data.

Summary

A cross-chain bridge linking Verus and Ethereum was exploited for more than $11 million, according to the provided report. Blockchain security firm Blockaid said the issue resembled previous bridge attacks involving Wormhole and Nomad, two well-known incidents that exposed how weak message verification can put cross-chain infrastructure at risk. The reported flaw stemmed from verification that failed to properly ensure source-chain data, a core security requirement for bridges that move assets or messages between separate blockchains.

Terms & Concepts
  • cross-chain bridge: Infrastructure that transfers tokens or messages between separate blockchains, typically by locking assets on one chain and issuing corresponding assets on another.
  • verification: The process of confirming that cross-chain messages or transactions are valid before a bridge releases funds or updates balances.
  • source chain: The original blockchain where an asset transfer or message begins before being recognized by another network.