According to blockchain security firms including Blockaid and Peckshield, the Verus-Ethereum Bridge was exploited late Sunday, draining $11.58 million in assets including 103.6 tBTC, 1,625 ETH, and 147,000 USDC. The attacker later swapped the stolen funds for 5,402 ETH, worth approximately $11.4 million. Blockaid identified the attacker's address as 0x5aBb…D5777.
GoPlus suggested the vulnerability likely involved cross-chain message validation failure, signature forgery, or an access control flaw. In response, the Verus network halted block generation while developers investigate the attack and assess whether additional funds remain exposed.