A bridge exploit targeting Taiko, the Ethereum layer-two network, has resulted in losses of about $1.7 million. Shortly after the attack, Taiko halted block production entirely and told users to withdraw funds from all network bridges. After confirming a compromise of its chain-state verification mechanism, Taiko warned that the security assumptions behind all bridges deployed on the network could no longer be relied upon. The problem was a flaw in the bridge’s source-signal validation process. In plain terms, the bridge wrongly accepted a fake withdrawal proof as valid, which let the attacker trigger unauthorized releases from Taiko’s vault contract on Ethereum.
Taiko also asked exchanges to suspend TAIKO deposits, indicating the response extended beyond a single bridge. Even if the losses are relatively small by historical standards, halting block production underscores how serious a breakdown in bridge verification can be.