Bridge Bandits Strike Again: $11.5M Vanishes Faster Than a Politician’s Promise

by

Well, butter my biscuit and call me surprised! Another day, another bridge exploit-this time, the Verus-Ethereum bridge got fleeced to the tune of $11.5 million. Blockaid, those digital bloodhounds, caught the scent and traced it back to Tornado Cash, the laundry mat of the crypto underworld.

  • Key Takeaways (or as I like to call them, the CliffsNotes for the financially curious):

  • The Verus-Ethereum bridge lost $11.5M, with the scoundrel converting 103.6 tBTC, 1,625 ETH, and 147K USDC into ~5,402 ETH. Faster than a catfish on a hook, I tell you.
  • Blockaid flagged this heist in real time, and other watchdogs confirmed the wallet was seeded via Tornado Cash. Seems like the only thing faster than these hackers is their laundry service.
  • This caper is just one in a string of bridge heists, with Peckshield tallying up $328.6M in losses for May alone. Cross-chain crime is booming-must be the season for it.

The Loot Gets Laundered: A Tale as Old as Time (or at Least as Old as Crypto)

The Verus-Ethereum bridge got hit harder than a mule on a Monday, losing $11.5 million in a coordinated exploit. The culprit made off with 103.6 tBTC, 1,625 ETH, and 147,000 USDC, then swapped it all for 5,402 ETH (worth about $11.4 million) stashed in wallet address 0x65Cb25F9. Slick as a greased pig, that one.

The scoundrel swapped the loot for 5,402 ETH ($11.5M), according to Arkham. Faster than a gossip in a small town.

Blockaid sounded the alarm as the heist went down, later confirming the wallet was seeded with 1 ETH via Tornado Cash. That’s right, the same Tornado Cash that’s been the go-to for crypto cleaners. Seems like the only thing more reliable than these hackers is their choice of laundry service.

Tornado Cash has popped up in more heists than a recurring villain in a dime novel. In this case, the single- ETH seed is as predictable as a politician’s promise. Attackers prep a clean wallet with the mixer, ensuring their tracks are covered better than a cat in a litter box.

Verus, a proof-of-work and proof-of- stake hybrid blockchain, prides itself on privacy and self-sovereign identity. Its Ethereum bridge lets users hop between networks to access DeFi protocols and yield opportunities. Too bad someone decided to turn it into a piggy bank.

The speed of this heist was something to behold-wrapped bitcoin, ether, and stablecoins all swapped into ETH faster than a hound on a scent. Traceability? Minimal. Laundering route? Simplified. These folks are professionals, I’ll give them that.

This breach is just the latest in a wave of bridge-related losses in 2026. Certik called April’s attacks a “high-stakes shift” in cross-chain cybercrime, with attackers targeting bridge weaknesses like vultures on a carcass. Peckshield has tracked eight bridge exploits in the first half of May, totaling $328.6 million. Seems like bridges are the new gold mines-for criminals, that is.

The Verus incident is just the latest addition to this growing tally. So, if you’re in the crypto game, keep your eyes peeled and your wallets tighter than a drum. These bridge bandits aren’t slowing down anytime soon.

Read More

2026-05-18 13:29