On July 23, the Ethereum-based Verus Bridge was attacked for the second time in two months. According to Blockaid, the hacker exploited a vulnerability in the import path, initiated unsecured withdrawals on the Ethereum side, and siphoned off approximately $7.54 million in ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD.
Analysts linked this incident to the same contract, entry point, and class of vulnerability as the protocol hack on May 18, which resulted in a loss of $11.5 million.