Verus Bridge Exploited for $7.54 Million in Second Attack This Year
Key Takeaways
- •The Verus Ethereum bridge suffered an exploit resulting in approximately $7.54 million in losses, confirmed through on-chain transaction data.
- •This is the second known breach of the same bridge infrastructure in 2025, following a May attack that initially cost $11.6 million before the attacker returned $8.5 million under a bounty deal.
- •The specific attack vector, types of assets stolen, and Verus team's detailed remediation plan have not yet been publicly disclosed.
- •The exploit occurred during a broader series of cross-chain bridge attacks, with Bitcoin and Ethereum-linked protocols collectively losing an estimated $35 million in simultaneous incidents.
- •Verus has used its official X account as the primary communication channel for updates, but no formal post-mortem has been published.
The Verus-to-Ethereum bridge was exploited for approximately $7.54 million, marking the second known breach to hit the cross-chain protocol this year following an earlier attack reported in May. Verus is a decentralized blockchain project that offers its own Layer-1 network and cross-chain bridge infrastructure connecting its chain to Ethereum. The incident adds to a wave of bridge exploits that have targeted decentralized finance infrastructure in recent days.
Details of the Exploit
The Verus Ethereum bridge was drained of roughly $7.54 million, according to reporting on the attack. Attacker activity was recorded on-chain, with confirmed transactions tied to the Ethereum side of the bridge contract.
On-chain data:
- Transaction: 0xa1f1e65c1cea4dba4ae439cd4dcdba6cc2dbda0ed1228e61f29ae9c9324eb099
- Network: Ethereum (Verus bridge contract)
The Verus team has communicated through its official X account, which serves as the project's primary channel for updates on the breach.
What Remains Unknown
The full attack method, the specific assets moved, and the team's detailed response have not yet been disclosed. Attribution and the precise exploit vector typically determine whether funds can be recovered. Coverage from The Block framed the incident as a new attack on the Verus Ethereum bridge, consistent with the reported loss figure. Until Verus publishes a formal post-mortem, the mechanism behind the breach remains unconfirmed.
History of Bridge Incidents
This is not the bridge's first exploit. Verus previously suffered an Ethereum bridge attack reported at $11.6 million, after which the hacker returned $8.5 million in ETH under a bounty agreement. Two significant breaches on the same bridge infrastructure within roughly two months raise questions about whether the protocol's cross-chain security model has systemic gaps that remain unaddressed.
Broader Context for Cross-Chain Security
Bridges hold pooled user funds to transfer value between blockchains, making them recurring targets for attackers. Bridge exploits have historically ranked among the most costly incidents in decentralized finance, and the Verus theft occurred amid a wider series of such attacks. Bitcoin and Ethereum-linked protocols lost a combined $35 million across multiple attacks hours apart, according to CoinDesk.
Other recent breaches include an AFX-operated bridge that lost $24.15 million in USDC and the NIGHT bridge exploit reported at $515 million. For related coverage, see Wanchain Cardano Bridge Loses $13M After NIGHT Signature Inflation Exploit.
Readers should monitor the Verus team's official channels for a confirmed cause, an accounting of stolen assets, and any indication of whether the attacker may be engaged for fund recovery, as occurred after the project's prior exploit.