Three DeFi Bridge Hacks Drain $35.6M in One Day

The BSquared exploit saw 8.59 million B2 tokens taken, worth roughly $3.86 million at the time. The attacker sold the tokens for 5,409 BNB, about $3.01 million, then bridged the proceeds to Ethereum and converted them into ETH and USDT. The funds were moved through NEAR Intents and HOT Protocol to obscure the trail, security teams said. The investigation remains active.

VerusCoin's Ethereum bridge lost $7.54 million in assets including ETH, tokenized Bitcoin, USDC, USDT, DAI, and other tokens. SlowMist said the attack reused a bug from a separate $11.5 million hack in May 2026. The flaw allowed unbacked payouts, meaning the bridge released assets without verifying sufficient backing. The attacker converted the stolen assets into 3,916 ETH, worth about $7.5 million, and sent the funds to Tornado Cash, SlowMist said.