Ronin Bridge validator-key compromise

Timeline events

• Ronin Bridge exploit disclosed2022-03-29

  The Ronin Bridge incident became public after a large unauthorized withdrawal involving ETH and USDC was identified.

  Exploit DisclosedHigh

• Attribution to Lazarus-linked activity reported2022-04-14

  Public reporting and government context associated the Ronin incident with North Korea-linked Lazarus activity.

  Attribution ReportedHigh

• Ronin users made whole and bridge liabilities reimbursed2022-06-28

  Sky Mavis reported that the remaining bridge liabilities were fully reimbursed, user-backed wETH and USDC were restored 1:1, and affected users were made whole.

  Reimbursement CompletedHigh

  Operator-funded reimbursement is recorded separately from partial attacker-fund recovery.

• Ronin Bridge reopened after audits and recapitalization2022-06-28

  Ronin reported that the rebuilt bridge was open for deposits and withdrawals after internal and external audits and full backing of user balances.

  Bridge ReopenedHigh

Evidence records

• Blockchains Have a 'Bridge' Problem, and Hackers Know It
  Wired · Tier 2 · High reliability · secondary · 2022-04-03
  Claim scope: Incident Case

  Major media coverage used for incident context and bridge-risk framing.

• $620 million crypto theft linked to North Korea
  Axios · Tier 2 · High reliability · secondary · 2022-04-14
  Claim scope: Incident Case

  Used for attribution context and reported loss framing.

• North Korea Designation Update
  Office of Foreign Assets Control · Tier 1 · High reliability · primary · 2022-04-14
  Claim scope: Incident Case

  OFAC April 14, 2022 designation update adding the Ronin getaway Ethereum address to the Lazarus Group SDN entry; authoritative government attribution boundary for the Ronin incident.

• SoK: A Review of Cross-Chain Bridge Hacks in 2023
  arXiv · Tier 2 · Medium reliability · secondary · 2025-01-06
  Claim scope: Incident Case

  Research context for bridge-hack classification and loss-scale comparison.

• The Ronin Bridge Is Open
  Ronin · Tier 1 · High reliability · primary · 2022-06-28
  Claim scope: Reimbursement

  Primary source for full liability reimbursement, 1:1 backing, and users made whole.

• The Ronin Bridge Is Open
  Ronin · Tier 1 · High reliability · primary · 2022-06-28
  Claim scope: Restart

  Duplicate URL retained as a separate event-scoped evidence record for reopening.

• Community Alert: Ronin Validators Compromised
  Ronin Network · Tier 1 · High reliability · primary · 2022-03-29
  Claim scope: Incident Case

  First-party disclosure of the compromised validator set, drained ETH and USDC, bridge halt, and commitment to recover or reimburse lost funds.

Source tiers describe evidence authority, not certainty for every claim. Tier 1 is the strongest source class; Tier 2 and Tier 3 provide progressively more secondary or supporting context. Source notes define what each record actually supports.