Attackers drain $11.5 million from Verus-Ethereum bridge in cross-chain exploit

Attackers drained approximately $11.58 million from the Verus-Ethereum bridge this week, stealing 103.6 tBTC, 1,625 ETH, and nearly 147,000 USDC before converting the assets into Ethereum, according to blockchain security firm PeckShield.

The incident, detected by blockchain security firms while the exploit was ongoing, highlights the persistent vulnerabilities surrounding cross-chain bridge infrastructure in the cryptocurrency sector.

According to blockchain monitoring reports, the attackers moved large amounts of crypto assets from the bridge before converting them into Ethereum. Security researchers are still investigating the precise exploit vector, while users await clarity regarding reimbursements, recovery plans, and future security upgrades.

Versus-Ethereum Bridge Exploit triggers rapid security response

The Versus-Ethereum Bridge Exploit was first identified by blockchain security company Blockaid, which said its exploit detection system flagged suspicious activity while the attack was still underway.

“The attack was discovered by Blockaid’s exploit detection system while it was still active,” — Blockaid, blockchain security firm.

The company reported that the attacker successfully removed several assets from the bridge ecosystem before swapping them into Ethereum. The rapid conversion of stolen funds complicated immediate recovery efforts and raised concerns over the liquidity exposure of bridge platforms.

Blockchain security monitoring account PeckShield later provided a detailed breakdown of the stolen assets linked to the Versus-Ethereum Bridge Exploit. According to the firm, the attacker stole approximately 103.6 tBTC, 1,625 ETH, and nearly 147,000 USDC from the protocol.

“103.6 tBTC, 1625 ETH, and approximately 147,000 USDC were reportedly taken from the bridge by the attacker,” — PeckShield, blockchain monitoring platform.

The stolen assets were subsequently exchanged for approximately 5,402.4 ETH, valued at around $11.4 million at the time of reporting. Researchers noted that the funds were being held in a wallet identified as “0x65Cb…25F9.”

The exploit adds to a growing list of attacks targeting decentralized finance protocols, particularly cross-chain bridges that facilitate asset transfers between separate blockchain ecosystems.

Tornado Cash link raises further investigation concerns

Investigators examining the Versus-Ethereum Bridge Exploit also identified suspicious funding activity connected to the attacker’s wallet before the breach occurred.

Analysts reported that nearly 14 hours before the exploit, the wallet associated with the attack received 1 ETH through Tornado Cash, a crypto mixing service frequently used to obscure transaction trails and wallet origins.

“Transaction trails are frequently obscured by Tornado Cash, making it more difficult to determine the source of funds,” — analysts cited in the report.

The use of Tornado Cash has drawn additional scrutiny because blockchain investigators often associate mixing services with efforts to hide illicit transaction activity. However, researchers have not yet publicly identified the individuals or group responsible for the attack.

Security experts say the movement of funds through mixers remains a major obstacle during forensic investigations into crypto-related thefts. The inability to easily trace the source of funds often delays attribution and recovery attempts.

The Versus-Ethereum Bridge Exploit now joins several high-profile bridge attacks that have collectively cost the digital asset industry billions of dollars in recent years.

Why cross-chain bridges remain vulnerable

The Versus-Ethereum Bridge Exploit underscores broader concerns about the structural weaknesses of cross-chain bridge protocols.

Cross-chain bridges are designed to allow users to transfer assets between different blockchain networks. While these systems improve interoperability across decentralized ecosystems, they also rely on complex smart contracts, validator structures, and liquidity management systems that can introduce critical vulnerabilities.

Industry analysts have repeatedly warned that bridge infrastructure remains one of the most targeted areas within decentralized finance because these protocols often hold substantial amounts of locked liquidity.

Developers and researchers investigating the Versus-Ethereum Bridge Exploit have not yet determined whether the vulnerability originated from validator systems, flawed smart contract logic, or another weakness within the protocol architecture.

At the time of publication, the Verus project team had not publicly disclosed the exact technical cause of the breach. Recovery efforts and possible compensation measures also remain unclear.

The incident is likely to renew discussions around stronger auditing practices, real-time exploit monitoring, and more resilient bridge security mechanisms across the decentralized finance industry.

As investigations continue, users affected by the Versus-Ethereum Bridge Exploit are expected to seek updates regarding reimbursement plans and additional safeguards aimed at preventing similar attacks in the future.

Primary source: U.Today report