Kaal on X: "🚨 Shibarium Bridge Security Update 🚨 Earlier today, a sophisticated ( probably planned for months ) attack was carried out using a flash loan to purchase 4.6M BONE. The attacker gained access to validator signing keys, achieved majority validator power, and signed a malicious state to drain assets from the bridge. Because the BONE was delegated to Validator 1, it remains locked (due to unstaking delays), giving us the chance to freeze those funds. ⸻ 🔒 Immediate Actions Taken •Paused stake/unstake functionality as a precaution. •Moved stake manager funds out of the proxy into a hardware wallet controlled by our trusted 6/9 multisig. •This move is temporary until we fully confirm the extent of any validator key compromise. ⸻ ✅ Next Steps Once secure key transfers are completed and validator control integrity is verified, the stake manager funds will be restored in full. Our top priority is protecting the network and community assets. We will continue to provide transparent updates as the investigation progresses. ⸻ ��️ Important Notes •We are currently in damage control mode and do not yet know if the breach originated from a server or a developer machine. •We are actively working with Hexens, Seal 911, and PeckShield to investigate the incident. •Authorities have been contacted. However, we are open to negotiating in good faith with the attacker: if the funds are returned, we will not press any charges and are willing to consider a small bounty."

Kaal

@kaaldhairya

🚨 Shibarium Bridge Security Update 🚨 Earlier today, a sophisticated ( probably planned for months ) attack was carried out using a flash loan to purchase 4.6M BONE. The attacker gained access to validator signing keys, achieved majority validator power, and signed a malicious state to drain assets from the bridge. Because the BONE was delegated to Validator 1, it remains locked (due to unstaking delays), giving us the chance to freeze those funds. ⸻ 🔒 Immediate Actions Taken •Paused stake/unstake functionality as a precaution. •Moved stake manager funds out of the proxy into a hardware wallet controlled by our trusted 6/9 multisig. •This move is temporary until we fully confirm the extent of any validator key compromise. ⸻ ✅ Next Steps Once secure key transfers are completed and validator control integrity is verified, the stake manager funds will be restored in full. Our top priority is protecting the network and community assets. We will continue to provide transparent updates as the investigation progresses. ⸻ ⚠️ Important Notes •We are currently in damage control mode and do not yet know if the breach originated from a server or a developer machine. •We are actively working with Hexens, Seal 911, and PeckShield to investigate the incident. •Authorities have been contacted. However, we are open to negotiating in good faith with the attacker: if the funds are returned, we will not press any charges and are willing to consider a small bounty.

6:59 AM · Sep 13, 2025·

98.6K

Views

134

461

31

Only some accounts can reply.