Verus-Ethereum Bridge Hit by $11.5M Exploit, Adds to Growing Blockchain Security Concerns

A suspicious transaction on the Ethereum blockchain has resulted in the withdrawal of nearly $11.5 million in assets from the Verus-Ethereum bridge, placing another crosschain protocol under heightened security scrutiny as attacks targeting blockchain bridges continue across the digital asset sector.

The transaction was recorded on May 17 at approximately 11:55 PM UTC and interacted with the Verus-Ethereum bridge contract deployed at address 0x71518580f36FeCEFfE0721F06bA4703218cD7F63.

Blockchain records show that 1,625.36 ETH was transferred from the bridge contract to a wallet identified as 0x65Cb8b128Bf6e690761044CCECA422bb239C25F9. Additional transfers included 103.56 tBTC and approximately 147,658 USDC sent to the same address.

Ethereum, tBTC, and USDC Removed From Bridge

Based on market prices visible at the time of the transaction, the transferred ETH was valued at roughly $3.44 million, while the tBTC holdings accounted for nearly $7.97 million. The USDC stablecoin transfers added approximately $147,600, bringing the total suspected losses to around $11.56 million.

Security researchers are currently treating the incident as a potential exploit, although the precise technical cause has not yet been confirmed.

At this stage, investigators have not determined whether the incident resulted from compromised bridge verification systems, manipulated proofs, smart contract vulnerabilities, key management failures, liquidity accounting issues, or another technical weakness within the protocol’s infrastructure.

How the Verus-Ethereum Bridge Operates

The affected contract address matches the architecture described in Verus project documentation for the Verus-Ethereum bridge.

The bridge was designed to facilitate transfers between the Verus ecosystem and Ethereum using cryptographic proofs and witness validation mechanisms generated by miners and network participants.

According to the project’s design, the bridge operates as a decentralized and non-custodial system, with Ethereum-side assets secured through the broader Verus network.

However, this type of architecture also increases the technical sensitivity of the system because it relies heavily on accurate crosschain verification, settlement messaging, liquidity accounting, and smart contract execution across multiple blockchain environments.

Blockchain Bridges Remain Major Security Targets

The incident once again highlights the growing security risks surrounding blockchain bridges, which have become some of the most frequently targeted pieces of infrastructure in the digital asset industry.

Over the past several years, multiple bridge exploits have resulted in billions of dollars in losses across the sector. Previous attacks involving protocols such as Ronin Bridge, Wormhole, and Harmony Horizon Bridge exposed vulnerabilities tied to crosschain messaging systems, validator security, and smart contract execution.

More recently, the industry has also seen attacks targeting decentralized finance protocols and crosschain liquidity systems, including incidents involving THORChain and other interoperability-focused infrastructure.

Analysts say the continued rise in bridge-related exploits reflects the complexity of maintaining secure interoperability between blockchain networks while handling increasingly large pools of liquidity.

Recovery Prospects Remain Uncertain

The types of assets involved may play a role in any potential recovery efforts.

While ETH and tBTC remain traceable on public blockchains, freezing or recovering those assets is generally more difficult compared to centralized stablecoins such as USD Coin.

Although USDC represented a relatively small portion of the suspected losses, investigators may still attempt to coordinate with issuers or exchanges if the assets move through identifiable centralized platforms before being further transferred or mixed.

Past incidents have shown that once stolen funds move through decentralized liquidity protocols, privacy tools, or multiple blockchain bridges, tracing and recovery efforts become significantly more challenging.

Market Awaits Verus Response

Attention is now shifting toward the Verus team’s response and the level of transparency surrounding the incident.

Market participants are expecting official clarification regarding the operational status of the bridge, the exact scale of the affected assets, the technical source of the failure, and whether any portion of the transferred funds can still be frozen or recovered.

So far, confirmed public blockchain data indicates that a single transaction moved 1,625.36 ETH, 103.56 tBTC, and nearly $148,000 in USDC from the Verus-Ethereum bridge contract into a single wallet, triggering suspected losses estimated at approximately $11.5 million.

The incident also reinforces a broader concern across the blockchain industry: as interoperability between networks expands, bridges continue to represent one of the most technically fragile and heavily targeted components of digital asset infrastructure.