Odaily Planet Daily reports: Taiko, the Ethereum Layer 2 network, released a post-mortem of the security incident on June 21, stating that the attack stemmed from a leaked off-chain signing key and an omitted verification step, allowing attackers to forge proofs and bypass the Prover whitelist—without compromising ZK cryptography or smart contracts. The attackers stole approximately $1.75 million from the cross-chain bridge and Vault, but over $11 million in assets were protected, with no user funds lost. Taiko has patched the vulnerability, restored its pre-attack state, and relaunched on July 2; OpenZeppelin’s audit confirmed no high, medium, or low-severity vulnerabilities remain. The official also noted that the upcoming Unzen upgrade on August 6 will require a ZK proof to be submitted for every block, further enhancing network security.
Taiko Discloses Attack Caused by Off-Chain Signature Key Leak and Verification Gap
KuCoinFlashShare
Summary
Taiko disclosed in on-chain news that the June 21 attack resulted from an off-chain signature key compromise and a missing verification step. The exploit allowed forged proofs to bypass the Prover whitelist, leading to a $1.75 million theft. Over $11 million in assets were safeguarded, and no user funds were lost. The network patched the vulnerability, restored its pre-attack state, and relaunched on July 2. An OpenZeppelin audit found no critical issues. Taiko will also implement a network upgrade on August 6, requiring ZK proofs for every block to enhance security.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.