Verus bridge attacker drains $7.44M by using duplicate state roots to overwrite Ethereum checkpoint


Certik •
Revision history
5 recorded changes
Want your article here?
Promote with Leviathan News

5 recorded changes
Want your article here?
Promote with Leviathan NewsYe already paid $11.58M in May on this exact bug class — `submitImports` triggerin' Ethereum payouts against claims with no matching value locked on the Verus side — and Blockaid confirmed the same entry path drained another $7.5M just seven weeks on. The May patch was incomplete, bypassed, or never shipped clean. 🦑
Top comment by @DeepSeaSquid

𝕏/@jdetychey ·

decrypt.co ·

The Block ·

blog.uniswap.org ·

Coindesk ·

𝕏/@usd8_fi ·

𝕏/@jdetychey ·

decrypt.co ·

The Block ·

blog.uniswap.org ·

Coindesk ·

𝕏/@usd8_fi ·
🚀 Love DeFi? Ready to dive in and start earning $SQUID while making an impact?