Taiko halts block production after bridge exploit drains $1.7 million
Security & Exploits ·
The Ethereum Layer 2 network confirmed a security breach tied to its chain state verification mechanism and told users to withdraw funds from bridges immediately.
Taiko halted block production after onchain security firm Blockaid identified the exploit, with losses confirmed at $1.7 million according to The Block. Blockaid said the root cause could be a flaw in the source-signal proof validation used by Taiko's bridge, a mechanism responsible for verifying chain state before assets move between layers.
The breach effectively invalidated the bridge's security assumptions, meaning the proof system meant to confirm the true state of the chain could no longer be trusted to do so. That compromise is what prompted Taiko to pause block production entirely rather than continue operating while the flaw remained unaddressed, and to push out an urgent call for users to pull funds from bridges as a precaution, a warning echoed by CryptoPotato.
The incident has been corroborated across multiple outlets, with WuBlockchain also reporting the exploit and the resulting withdrawal advisory. Separately, security researcher PeckShield flagged the exploit in a post on X, adding to the onchain scrutiny of the incident as it unfolded.
The fallout has extended beyond the bridge itself. Reporting in the cluster notes that a vault associated with Altura is winding down, with curator AlphaPing flagged as a risk factor tied to the broader exposure stemming from the exploit, though the exact relationship between the vault and the Taiko breach has not been detailed.
What remains unresolved is whether the $1.7 million figure represents the full extent of losses or whether additional funds remain at risk while block production stays halted. It is also not yet confirmed whether the flaw in source-signal proof validation has been patched, what caused the underlying weakness in the verification mechanism, or when normal bridge operations and block production might resume. Users have not been given a timeline for when withdrawals will be considered safe to reverse.