SKALE IMA Bridge 2026 validator-infrastructure compromise
At approximately 21:00 UTC on August 27, 2026, infrastructure providers running validator nodes in the SKALE Network were compromised and the Ethereum-connected SKALE IMA Bridge was exploited. The attacker drained ERC-20 assets held in affected bridge infrastructure. SKALE immediately paused the bridge and began investigating the exact attack vector, total loss and recovery options. SKALE on Base was explicitly reported as unaffected.
Incident facts
- Incident title
- SKALE IMA Bridge 2026 validator-infrastructure compromise
- Bridge
- SKALE IMA Bridge
- Incident date
- 2026-08-27
- Incident type
- Exploit
- Major incident
- Yes
- Affected chains
- Ethereum, Unknown
- Affected assets
- Unknown
- Attack category
- Unknown
- Reported loss
- Unknown — under assessment
- Amount confidence
- Unknown
- Loss amount basis
- Unknown
- Recovery
- Unknown
- Reimbursement
- Unknown
- Restart
- Paused
- Current outcome
- Unknown
- Postmortem
- Unclear
- Resolution
- Unresolved
- Last reviewed
- 2026-09-09
- Last verified
- 2026-09-09
Amount and valuation
SKALE states that ERC-20 assets were drained and that the total value lost is still being assessed.
No canonical USD amount is emitted because SKALE had not published a verified total at the admitted evidence horizon.
Why this remains unresolved
- The total value lost remains under assessment.
- The precise attack vector remains under investigation.
- Recovery and reimbursement outcomes are not established.
- A dated restoration of affected IMA Bridge functionality is not established.
Timeline events
SKALE IMA Bridge infrastructure exploited2026-08-27
Infrastructure providers running validator nodes were compromised and the Ethereum-connected IMA Bridge infrastructure was exploited, allowing an attacker to drain ERC-20 assets. The exact technical attack vector and total value lost remained under investigation.
SKALE Europa is preserved in prose because there is no dedicated reference key.
SKALE pauses affected IMA Bridge2026-08-27
SKALE paused the affected IMA Bridge as soon as the attack was discovered and began working with affected parties and authorities to trace, freeze and recover stolen assets.
SKALE on Base remained operational and is excluded from this pause event.
Evidence records
- Security Incident Update: SKALE IMA BridgeSKALE Network · Tier 1 · High reliability · primary · 2026-08-28Claim scope: Incident Case
First-party incident statement supporting the August 27 validator-infrastructure compromise, IMA Bridge exploit, ERC-20 drain, Ethereum-connected scope, Base non-impact and unresolved loss/root-cause boundary.
- Security Incident Update: SKALE IMA BridgeSKALE Network · Tier 1 · High reliability · primary · 2026-08-28Claim scope: Event
First-party incident statement supporting immediate pause of the affected IMA Bridge and ongoing trace/freeze/recovery work; it does not establish reopening or completed recovery.
Source tiers describe evidence authority, not certainty for every claim. Tier 1 is the strongest source class; Tier 2 and Tier 3 provide progressively more secondary or supporting context. Source notes define what each record actually supports.
Known unknowns
- Exact affected ERC-20 asset inventory and wallet list are not yet published.
- The current BIR chain vocabulary lacks a dedicated SKALE Europa reference key, so Europa is preserved in prose rather than inferred into a new key.
Help maintain incident aftermath records
Support recovery, reimbursement, restart, migration, shutdown, evidence, and correction checks.
Report a correction
Report missing evidence, incorrect dates, outcome changes, recovery details, reimbursement status, or broken links. GitHub Issues are preferred for structured review; the Google Form is available if you do not use GitHub.