Two unrelated bridge exploits hit AFX Trade and Verus Protocol within seven hours, draining approximately $24 million and $7.5 million respectively through compromised bridge infrastructure on Arbitrum and other chains.
Ethereum-based rollup Taiko confirmed a compromise of its chain state verification mechanism, halting block production and urging users to withdraw funds. The exploit resulted in approximately $1.7 million in losses.
Aave published an official postmortem tracing a $230 million exploit to a LayerZero bridge verification failure and announced a sweeping overhaul of its asset-listing standards as DeFi risks shift beyond smart contract bugs.
Echo Protocol suffered a bridge exploit where an attacker minted 1,000 eBTC (worth approximately $76.64 million) on Monad using a compromised admin key, then used the fake eBTC to borrow real crypto assets. The protocol suspended all cross-chain transactions.
The Arbitrum Security Council froze $71 million worth of ETH stolen in the $292 million Kelp DAO exploit, with funds only movable through further governance action. Kelp DAO and LayerZero continue to dispute responsibility for the bridge vulnerability.
Hyperbridge has raised its loss estimate from the Token Gateway exploit from an initial $237,000 to $2.5 million, with some funds traced to Binance. The Polkadot-Ethereum bridge protocol significantly underestimated the scope of the security breach.
