Bounty

DeFi

Verus

Read

<p><strong>The attacker behind the Verus bridge exploit has returned $8.5 million in ETH to the protocol, opting to keep a bounty offered by the Verus team in exchange for the funds' safe return.</strong></p>
<h2 id="how-the-verus-bridge-recovery-unfolded">How the Verus bridge recovery unfolded</h2>
<p>The return of funds was confirmed through on-chain activity tied to the <a href="https://etherscan.io/address/0x5abb91b9c01a5ed3ae762d32b236595b459d5777" rel="noopener noreferrer nofollow">attacker's Ethereum wallet</a>. The $8.5 million in ETH was sent back to Verus-controlled addresses, resolving the bulk of the exploited funds.</p>
<p>Prior to the return, <a href="https://cryptoadventure.com/verus-offers-1350-eth-bounty-to-bridge-exploiter-for-fund-return" rel="noopener noreferrer nofollow">Verus had offered a 1,350 ETH bounty</a> to the exploiter as incentive to return the stolen assets. The attacker accepted the deal, keeping the bounty as compensation while sending the remainder back to the protocol.</p>
<h2 id="why-the-attacker-kept-a-bounty">Why the attacker kept a bounty</h2>
<p>In DeFi exploit recoveries, protocols sometimes offer "white hat" bounties to attackers. The arrangement treats the exploit as an unauthorized security audit, with the bounty serving as a reward for exposing the vulnerability and returning funds rather than disappearing with them.</p>
<p>In this case, the Verus team's offer of 1,350 ETH created a financial incentive for the attacker to cooperate. The attacker retained that amount while returning the larger share of exploited funds, a negotiated outcome that allowed Verus to recover the majority of user assets.</p>
<p>This type of resolution has become increasingly common across DeFi. As <a rel="noopener noreferrer nofollow">major crypto platforms expand into new financial products</a> and <a rel="noopener noreferrer nofollow">trading services mature</a>, bridge security remains one of the sector's most persistent weak points.</p>
<h2 id="what-this-means-for-verus-and-bridge-security">What this means for Verus and bridge security</h2>
<p>The recovery marks a positive outcome for Verus users, though it raises questions about the protocol's bridge architecture. Cross-chain bridges remain high-value targets because they custody large pools of locked assets, making any smart contract vulnerability potentially catastrophic.</p>
<p>The fact that the attacker chose to cooperate rather than attempt to launder the funds through mixers suggests that on-chain traceability and the growing difficulty of cashing out large sums of stolen crypto played a role in the decision. Projects like <a rel="noopener noreferrer nofollow">Solmate raising capital for treasury operations</a> underscore how the broader ecosystem continues to build infrastructure around asset security and management.</p>
<p>Verus has not yet published a full post-mortem on the exploit's root cause. Users and developers should monitor the project's official channels for details on what vulnerability was exploited and what steps the team is taking to prevent a recurrence.</p>
<p>Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.</p><a href="https://coinlineup.com/?p=26343" rel="noopener noreferrer nofollow">Read original article on coinlineup.com</a>

Verus Bridge Attacker Returns $8.5M in ETH, Keeps Bounty

Table of Contents

Coinlineup.com

Other articles published on May 22, 2026

Join our free newsletter for daily crypto updates!