Verus Bridge Hit Again as $7.5M Vanishes in Repeat Hack

TL;DR

• Verus Bridge lost about $7.54 million in a second exploit roughly two months after an earlier $11.58 million attack targeted the same contract.
• The vulnerability allowed Ethereum payouts without confirming that matching value had been committed on Verus, despite valid signatures and Merkle proofs.
• Security firms linked the flaw to missing Solidity validation, while users were advised to avoid the bridge until repairs and an independent audit are confirmed publicly.

Verus Bridge has suffered a second major exploit in roughly two months, with an attacker draining about $7.54 million from its Ethereum bridge on Thursday. The incident appears to involve the same vulnerability used in May, when approximately $11.58 million was stolen from the same contract. The repeat breach suggests a known validation flaw remained unresolved after the first attack. Blockaid said the latest theft affected assets including ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD, reigniting concerns about how quickly bridge operators respond once a critical weakness becomes public across the wider DeFi market.

… Continue reading the full article at the original source below.