
🚨 TAIKO LOST $1.7M BECAUSE SOMEONE PUSHED A PRIVATE KEY TO A PUBLIC GITHUB REPO. 🔑An SGX signing key was left exposed in the Taiko repo. The attacker used it to forge withdrawal proofs and drain the bridge no matching deposits needed. $TAIKO dropped ~20%. The team froze activity within hours, but ~$1.7M was already gone. 📉 Q2 2026: 83 exploits, $755M stolen worst quarter on record. Bridges alone account for $351M. Same structural flaw as Ronin in 2022. Nothing has changed. When the real vulnerability is operational - a key committed to a repo, not a contract bug - is code auditing still enough?
