Security firm Blockaid issued an urgent community alert after its real-time exploit detection system identified an active attack on the Verus-Ethereum bridge — approximately $11.58 million had been drained at the time of warning, and the exploit was still in progress. Blockaid, trusted by Coinbase and MetaMask for threat detection, emphasized the figure was not final.
Live Exploit Details: Validation Logic Under Fire
Cross-chain bridges hold concentrated liquidity pools on both sides, making them prime targets. The Verus-Ethereum bridge connects Verus (a privacy-focused PoW/PoS hybrid chain) to Ethereum's ecosystem. Attackers likely exploited a vulnerability in the escrow contract's validation or transaction processing on the Ethereum side — a pattern consistent with every major bridge exploit of 2026.
Blockaid's system flagged the drain in real time and issued a public alert while funds were still being taken. No official statement from the Verus team had confirmed whether the attack vector was closed or additional funds remained at risk at the time of publication.
2026 DeFi Security Context and Urgent User Actions
This hack is the latest in the worst year for DeFi security on record. Through mid-April 2026, DeFi losses topped $750 million, led by the $292 million KelpDAO bridge exploit and the $285 million Drift Protocol hack. April alone logged approximately $625 million drained across 28 incidents — the highest monthly total ever.
Blockaid had previously flagged a $5 million exploit on Wasabi Protocol in April and a $6.7 million exploit on TrustedVolumes in early May, demonstrating consistent real-time detection capability.
Three immediate actions for anyone who interacted with the Verus-Ethereum bridge: 1) Do not initiate any new transactions until the team gives a full all-clear. 2) Revoke any pending approvals tied to the bridge contract using Revoke.cash. 3) Monitor Verus's official X account and Blockaid's account for real-time updates.
Expert Take: Trust Layer Is the Weakest Link
Security analysts tracking 2026 exploit patterns note that the attack surface in DeFi has shifted from smart contract code flaws to validation logic and cross-chain message verification weaknesses. Every major incident this year — KelpDAO, Hyperbridge, ZetaChain, now Verus — shares a common thread: breaking the trust layer that connects two blockchains, not the blockchains themselves. Until bridge protocols adopt redundant verification, multi-sig admin controls, and real-time circuit breakers as standard practice, attacks of this scale will continue.