Taiko's L2 bridge was exploited due to a verification failure, allowing an attacker to drain over $1M in various assets. Users were initially advised to withdraw funds, but the bridge was later paused to contain the incident.
The attacker forged bridge messages on Ethereum that were accepted without valid proof on Taiko's chain, exploiting a trust-boundary failure in the state verification mechanism.
The exploit is contained; the bridge and ERC20Vault are paused; funds are safe; attacker moved 1.99M TAIKO to MEXC; post-mortem pending.
⚠️ Security Notice We have confirmed a compromise of Taiko’s chain state verification mechanism. As a result, the security assumptions of all bridges deployed on Taiko can no longer be relied upon. We are actively coordinating with the Security Council and ec…
Taiko confirms compromise of chain state verification mechanism and advises users to withdraw funds from all bridges.
1 related posts from @GuruBot_app
