Verus-Ethereum Bridge
Verus-Ethereum Bridge is Verus's non-custodial bridge between Verus and Ethereum. A second 2026 exploit on July 23 used the Ethereum import path to trigger unbacked payouts from bridge reserves. Verus later referenced the latest Ethereum bridge hack in its v1.2.17-3 security release while stating that Ethereum contracts were not yet ready for upgrade; a dated post-incident reopening has not been established.
Bridge facts
- Canonical name
- Verus-Ethereum Bridge
- Type
- Asset Bridge
- Status
- Paused
- Confidence
- High
- Primary chains
- Verus, Ethereum
- Primary assets
- ETH, tBTC, USDC, USDT, MKR, scrvUSD, EURC
- Operator
- Verus protocol contributors / Verus community
- Ecosystem
- Verus
- Launch date
- 2023-10-20
- End date
- Unknown
- Terminal reason
- Not applicable / unknown
- Last reviewed
- 2026-08-20
- Last verified
- 2026-08-20
Incident cases
Verus-Ethereum Bridge July 2026 import verification exploit2026-07-23
On July 23, 2026, the Verus-Ethereum Bridge was exploited through the Ethereum import path, causing unbacked payouts from bridge reserves. Reproducible Ethereum analysis and contemporaneous reporting place the drain at about $7.54 million across ETH, tBTC, USDC, USDT, MKR, scrvUSD, and EURC. Verus's August 1 security release explicitly references the latest Ethereum bridge hack while saying Ethereum contracts were not yet ready for upgrade. Recovery, reimbursement, and post-incident reopening remain unverified.
Verus-Ethereum Bridge May 2026 import verification exploitApprox. 2026-05-18
In May 2026, the Verus-Ethereum Bridge suffered a separate Ethereum-side cross-chain import verification exploit before the later July incident. Independent incident reporting and transaction analysis place the gross drain at about $11.4–11.6 million across ETH, tBTC and USDC. Verus later documented partial asset recovery, a restoration and restitution process, and a July 12 bridge reopen process. A separate unexploited vulnerability caused another precautionary pause on July 16. These May-aftermath facts do not resolve the later July exploit.
Evidence records
- What is the Verus-Ethereum BridgeVerus · Tier 1 · Approx. 2026-08-20
- Verus v1.2.17-3 — critical security upgradeVerusCoin · Tier 1 · 2026-08-01
- The missing check: a full-chain post-mortem of the $7.54M Verus bridge exploitSIRENBOW · Tier 2 · 2026-07
- Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apartCoinDesk · Tier 2 · 2026-07-23
- Verus-Ethereum Bridge July 2026 exploit transactionEtherscan · Tier 2 · 2026-07-23
- Verus v1.2.17 — bridge restoration and recovery updateVerusCoin · Tier 1 · 2026-07-03
- Verus Bridge Exploit — May 2026 independent transaction analysisu0 · Tier 2 · Approx. 2026-05-18
- Verus-Ethereum Bridge May 2026 exploit transactionEtherscan · Tier 2 · Approx. 2026-05-18
- Ongoing exploit drains $11.6 million from Verus-Ethereum bridge: BlockaidThe Block · Tier 2 · 2026-05-17
- Verus v1.2.17 — partial recovery and residual backing-loss statementVerusCoin · Tier 1 · 2026-07-03
- Verus bridge exploiter returns 4,052 ETH, retains $2.8 million bounty: onchain analystThe Block · Tier 2 · 2026-05-22
- Verus v1.2.17 — restoration and restitution mechanicsVerusCoin · Tier 1 · 2026-07-03
- Verus v1.2.17-1 — Ethereum bridge contract upgrade and reopen processVerusCoin · Tier 1 · 2026-07-12
- Verus v1.2.17-2 — precautionary cross-chain pause for separate unexploited vulnerabilityVerusCoin · Tier 1 · 2026-07-16
Official URL status
Official URL recorded as live_verified: https://www.verus.io/ethereum-bridgeHelp maintain bridge history
Support incident linkage, lifecycle updates, evidence preservation, broken-link replacement, and corrections.
Report a correction
Report missing evidence, incorrect dates, outcome changes, recovery details, reimbursement status, or broken links. GitHub Issues are preferred for structured review; the Google Form is available if you do not use GitHub.