Blockchain security firm Blockaid detected a new attack on the Verus-Ethereum Bridge on July 23, 2026, draining approximately $7.54 million. The attacker exploited the bridge’s import process to release funds without depositing matching assets on the source chain, using the same weakness as a May breach that stole $11.58 million.
The Verus-Ethereum Bridge has been hacked again, with Blockaid detecting the attack on July 23. According to the firm, the attacker exploited the bridge’s import process to release funds without depositing matching assets on the source chain.
On-chain data shows the exploit occurred at 03:45 UTC. Approximately 1,137 Ethereum (ETH), along with tBTC, USD Coin (USDC), Tether (USDT), EURC, Maker (MKR), and Savings crvUSD (scrvUSD), were transferred to an attacker-controlled wallet. Etherscan valued the main outflows at approximately $7.54 million at the time.
Blockaid noted that although the attacker used a different wallet and transaction, they still targeted the same bridge contract, entry path, and likely bug category as in the May breach. That earlier exploit resulted in losses of $11.58 million.
