Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart
The attacks hit Verus, B² Network and other cross-chain systems, showing how compromised keys, upgrade powers and validation checks can empty protocols without breaking the underlying cryptography.
YayaNews contributes financial news and market context through the YayaNews editorial workflow.
Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart
Tech
Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart
The attacks hit Verus, B² Network and other cross-chain systems, showing how compromised keys, upgrade powers and validation checks can empty protocols without breaking the underlying cryptography.
By
Shaurya Malwa
|
Edited by
Omkar Godbole
Updated
Jul 23, 2026, 7:21 a.m.
Published
Jul 23, 2026, 6:38 a.m.
4
min read
Make
preferred on
Share
Share this article
Copy link
X icon
X (Twitter)
Make
preferred on
Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart. (Mika Baumeister/Unsplash)
Summary
Show
In a six-hour span, at least three crypto bridges and cross-chain protocols were drained of more than $35 million, exposing recurring weaknesses in how these systems are designed and governed.
Verus’s Ethereum bridge was exploited for about $7.54 million using the same contract path and bug class as a May hack, underscoring how unresolved flaws and redeposited funds left the system vulnerable to a second drain.
The B² Network lost roughly $3.86 million after an attacker seized its staking contract’s upgrade authority, highlighting how compromised keys and permissions — not broken cryptography — remain the primary cause of major crypto thefts as AI-driven intrusion tools grow more capable.
Crypto's bridges and cross-chain protocols are having a brutal day, capping an already
punishing year
.
At least three were drained in quick succession over a 6-hour period, for a combined total exceeding $35 million, according to blockchain data analyzed by CoinDesk and reported by security firms BlockAid and PeckShield.
The run of attacks shares a common thread that underscores the need to audit off-chain components, such as private keys, not just smart contract code.
None broke the underlying cryptography — each was either a logic flaw, where the code ran as written, but the rules still let money out, or a compromised key that handed an attacker control it should never have had.
The three exploits
The perpetuals exchange AFX lost about $24.15 million from a bridge it runs on Arbitrum. The Verus-Ethereum bridge was drained of $7.54 million, its second hack this year through the same flaw. And B², a Bitcoin scaling network, lost $3.86 million from its token staking contract.
The most damning was blockchain network Verus. Blockaid
detected an exploit
on the Verus-Ethereum bridge early Thursday that drained about $7.54 million in ether, tokenized bitcoin and a spread of stablecoins.
🚨 Blockaid detected a
@VerusCoin
Ethereum Bridge exploit on Ethereum.
An attacker used the bridge import path to trigger unbacked Ethereum-side payouts, draining ~$7.54M in ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from bridge reserves.
More details in 🧵
— Blockaid (@blockaid_)
July 23, 2026
The firm flagged that the attack reused the same bridge contract and entry path as an earlier hack, exploiting an identical class of bug. CoinDesk reported that earlier incident,
an $11.5 million loss
, in May.
A bridge is a blockchain-based tool that enables assets to move between two networks that otherwise cannot interact. It holds real tokens on one side and issues claims against them on the other, and its safety depends entirely on correctly verifying that every withdrawal is genuinely backed by assets locked on the other chain.
The Verus flaw let an attacker trigger payouts on the Ethereum side that were never properly backed on the Verus side, so the bridge released real money against a claim worth almost nothing.
The attacker returned most of the funds in exchange for a bounty after the May attack. Verus then redeposited the recovered money into the same bridge on July 8, according to
onchain records
compiled by security researchers, and the bridge was drained again two weeks later.
The cost of that trust is visible in the protocol's own numbers. Verus held close to $100 million in total value locked at the start of 2025,
according to DefiLlama
. It holds about $9 million as of Thursday, a slow bleed punctuated by a fresh drop this week as the latest hack landed.
(Shaurya Malwa/CoinDesk)
Such repeated failures do not just cost the money stolen in any single attack, but drain the confidence that keeps assets on the platform at all.
Another confirmed attack was B² Network, a scaling network built to make Bitcoin cheaper and faster to transact on.
B² said
in Asian morning hours Thursday that an attacker gained unauthorized access to the upgrade authority of its token staking contract, the administrative permission that controls how that contract behaves.
Security firm Lookonchain
traced roughly $3.86 million
in B2 tokens that were sold, converted to ether and stablecoins, and moved on. B² said it had contained the incident, suspended staking and would fully compensate affected users.
A smart contract is only as safe as the keys and permissions that control it. If an attacker seizes the authority to change how a contract works, the code does not need a bug, because the attacker can simply rewrite the rules or drain the funds directly.
This is the failure mode behind the largest thefts in crypto history, from the Wormhole and Nomad bridge hacks of 2022 to KelpDAO's roughly $290 million loss earlier this year.
And it is about to get harder to defend. In an
analysis published this week
, OpenAI disclosed that during an internal evaluation, its AI models broke out of their test environment and compromised the servers of Hugging Face, chaining together stolen credentials and previously unknown software flaws to do it.
(Shaurya Malwa/CoinDesk)
The models had their safety limits lowered for the test, so this was not a system acting on its own. But it was a concrete demonstration that AI can now perform the patient, multi-step intrusion work that until recently required a skilled human team.
In most industries, a breach means incident response and, eventually, recovery. In crypto, where a drained contract is final and there is no chargeback, the same capability points at a threat with no undo button.
In 24 hours, four teams – Verus, B², AFX and Balance – were drained for the same underlying reason. None fell to a broken cipher. Each lost a trusted control, and the tools for finding those controls are only getting sharper.
Latest Crypto News
1
Live markets: Bitcoin trades above $65,000 as Alphabet's bigger AI bill props up the chip trade
12 minutes ago
2
BitMEX, the exchange that invented perps, is shutting down
34 minutes ago
3
24/7 financial rails: How BNY plans to eliminate the weekend lag in U.S. Treasuries
34 minutes ago
4
South Korea's oldest crypto exchange is now part of the $1 trillion Mirae Group family
2 hours ago
5
Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised
4 hours ago
6
XRP whales accumulate as small holders capitulate
5 hours ago
7
Bitcoin wilts as oil and rates rise. Clarity Act odds tumble to 38%
5 hours ago
8
Senator Lummis: Ethics, other provisions in crypto Clarity Act to be further discussed
9 hours ago
9
Key Democratic lawmakers say crypto Clarity Act 'falls short' on ethics, other issues
10 hours ago
10
Tesla holds bitcoin treasury steady, reports $112M impairment loss
12 hours ago
Latest Research
Crypto Flows, Share and the Selective Rotation
Crypto Flows, Share and the Selective Rotation
Markets repositioned since June, but Binance held share (~55% user funds, ~24% spot) and drew net inflows in early July while the tracked market saw outflows.
By
CoinDesk Research
18 hours ago
Markets repositioned since June, but Binance held share (~55% user funds, ~24% spot) and drew net inflows in early July while the tracked market saw outflows.
Why it matters
:
Markets repositioned since June, but Binance held share (~55% user funds, ~24% spot) and drew net inflows in early July while the tracked market saw outflows.
View Full Report
More From
Tech
Live markets: Bitcoin trades above $65,000 as Alphabet's bigger AI bill props up the chip trade
Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised
Balance stablecoin collapses 99% after $1 million exploit drains its bitcoin vaults
Crypto
CD20
$1,787.94
CD20 up 0.019 percent
0.019%
BTC
$65,629.70
BTC down 0.37 percent
0.37%
ETH
$1,928.11
ETH up 0.29 percent
0.29%
XRP
$1.13
XRP up 0.18 percent
0.18%
SOL
$77.48
SOL up 0.023 percent
0.023%
Original YayaNews editorial coverage, published for informational purposes.
This article is sourced from CoinDesk. It is for informational purposes only and does not constitute investment advice.
Topics & Symbols
Continue Reading
Related Reading
Live markets: Bitcoin trades above $65,000 as Alphabet's bigger AI bill props up the chip trade
Alphabet beat on revenue but raised its AI spending forecast again, sending its stock lower after hours. For the chip complex bitcoin tracks, more spending is the bullish read.
South Korea's Korbit exchange is now part of the $1 tillion Mirae Group family
Mirae Asset Consulting has become the largest shareholder in Korbit but that does not change the corporate entity. Here's everything users might want to know about the deal.
Bitcoin price (BTC) news: Clarity Act odds tumble, U.S. deploys B1 bomber against Iran
Bitcoin fell below $65,500 as oil surged toward $88.60, Treasury yields climbed, and Clarity Act passage odds dropped from 46% to 38% after Senate Democrats said the latest draft falls short on ethics and consumer protections.
Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised
Security firms said the attacker used enough hot-validator signatures to approve a 24.15 million USDC withdrawal, while Arbitrum said its native bridge was not affected.
