Skip to content
- Ethereum’s Truebit loses $26.6M after a major security breach.
- TRU token crashes 99.9% as Truebit faces devastating hack aftermath.
- Two attackers exploit Truebit’s old smart contract for millions.
Truebit, a popular Ethereum-based verification protocol, has suffered a devastating security breach, resulting in the loss of 8,535 ETH, valued at approximately $26.6 million. The hack, which occurred last Thursday, has offered a massive overview of the vulnerabilities in the workings of the decentralized finance (DeFi) protocols, particularly older smart contracts. Truebit verified the assault on X, declaring that rogue hackers have been at play, and they are collaborating with the police in investigating the cases.
The statement was verified to be 8,535 ETH, which the Onchain analytics platform Lookonchain identified as stolen. According to the researcher Weilin Li, who acted independently, the exploit must have been due to a bug in a smart contract that was deployed five years ago. This was the weakness that enabled the attackers to mint the native TRU tokens of Truebit at a significantly lower price.
Two different attackers made a profit of approximately $26 million, and the other made nearly $250,000. Li emphasized that older contracts are being targeted by cybercriminals more and more as they cover weak points that remain unnoticed.
The native token of Truebit, TRU, crumpled by more than 99.9 percent due to the attack. The token fell to a radically low level of about $0.16, down to the frontiers of the alarming level of $0.00007721, which also increased the damage done by the exploit. Such a drastic fall in the value of TRU has cast doubt on the sustainability of the platform and the DeFi ecosystem in general.
Also Read: Jupiter Shakes Solana With JupUSD Launch as $500M USDC Shifts Into New Stablecoin
A Growing Threat in DeFi Security
The assault on Truebit is not the only one in the list of high-profile security breaches in the DeFi space. In November, a rounding error in Balancer v2 Composable Stable Pools was capitalized upon to drain more than $120 million in several chains. Other protocols such as Bunni, Nemo Protocol, Hyperdrive, and Yearn Finance have also been attacked in the same way, raising concerns about the growing risks of legacy contracts.
Also, AI research company Anthropic has recently cautioned that more sophisticated AI agents are currently being deployed to detect both old and new smart contract vulnerabilities on Ethereum. Even the most esoteric vulnerabilities can be exploited by these AI agents, and DeFi protocols are becoming more vulnerable to an attack.
The Truebit breach is a bitter lesson on the increased difficulty of securing DeFi protocols. It also brings out the urgency of developers to audit and test smart contracts regularly to reduce risks posed by such exploits. With the DeFi environment continuing to develop, developers and users should be alert to prevent future attacks on digital assets.
Also Read: LIT Climbs Sharply as Onchain Activity Fuels Buyback Talk Around Lighter
