{"id":88906,"date":"2025-09-14T11:18:15","date_gmt":"2025-09-14T08:18:15","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=88906"},"modified":"2025-09-14T11:20:11","modified_gmt":"2025-09-14T08:20:11","slug":"shibarium-bridge-hacked-for-approximately-2-3-million","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/shibarium-bridge-hacked-for-approximately-2-3-million\/","title":{"rendered":"Shibarium Bridge Hacked for Approximately $2.3 Million"},"content":{"rendered":"<p>An &#8220;ingenious&#8221; flash loan attack allowed a hacker to extract around $2.3 million in ETH and SHIB from the Shibarium bridge, which connects the L2 network with Ethereum.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">UPDATE 13\/09\/25<\/p>\n<p>What we know so far about the recent incident \ud83d\udc47<\/p>\n<p>How the exploit was executed:<\/p>\n<p>\u2022 The attacker used funds from the bridge hack in the same block as the attack to acquire 4.6M BONE to temporarily gain validator voting power, attempting to do it in one\u2026 <a href=\"https:\/\/t.co\/4Ft1VMxeBv\">https:\/\/t.co\/4Ft1VMxeBv<\/a><\/p>\n<p>\u2014 Shib (@Shibtoken) <a href=\"https:\/\/twitter.com\/Shibtoken\/status\/1966845298774278444?ref_src=twsrc%5Etfw\">September 13, 2025<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>The Shiba Inu team suggested that the attacker had been planning the operation for several months.<\/p>\n<p>During the attack, the hacker borrowed 4.6 million BONE, Shibarium&#8217;s governance tokens, and compromised 10 out of 12 network validator keys. By gaining control over the consensus mechanism, the hacker transferred 224.57 ETH and 92.6 billion SHIB from the bridge&#8217;s smart contract to their own address.<\/p>\n<p>The hacker also seized KNINE tokens worth approximately $700,000 from the K9 Finance DAO project within the Shibarium ecosystem. According to Shiba Inu developers, the attack affected LEASH, ROAR, TREAT, BAD, and SHIFU coins. However, these assets have not yet been moved or sold.<\/p>\n<p>Following the incident, the team took the following actions:<\/p>\n<ul class=\"wp-block-list\">\n<li>Suspended staking deposit and withdrawal functions;<\/li>\n<li>Transferred funds from proxy contracts to secure multi-signature hardware storage;<\/li>\n<li>Initiated an investigation in collaboration with Hexens, Seal911, and PeckShield.<\/li>\n<\/ul>\n<p>Shiba Inu noted that the attacker cannot withdraw the 4.6 million BONE\u2014the funds remain delegated to validators and are effectively frozen. Additionally, the hacker cannot liquidate KNINE, as K9 Finance DAO has blacklisted their address.<\/p>\n<p>The team aims to:<\/p>\n<ul class=\"wp-block-list\">\n<li>Return keys to validators once network integrity is confirmed;<\/li>\n<li>Restore staked funds as soon as their security is ensured;<\/li>\n<li>Continue coordinated efforts with partners to freeze assets linked to the hacker;<\/li>\n<li>Complete the investigation and publish a report on the incident.<\/li>\n<\/ul>\n<p>Earlier in September, attackers <a href=\"https:\/\/forklog.com\/en\/news\/hackers-breach-swissborg-crypto-platform-steal-40-million\">stole 192,600 SOL<\/a> worth $41 million from the Swiss crypto platform SwissBorg and hacked the DeFi platform Nemo for $2.4 million.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An &#8220;ingenious&#8221; flash loan attack allowed a hacker to extract around $2.3 million in ETH and SHIB from the Shibarium bridge, which connects the L2 network with Ethereum.<\/p>\n","protected":false},"author":1,"featured_media":88907,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"A hacker extracted $2.3 million in ETH and SHIB from the Shibarium bridge.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44,1179,1525],"class_list":["post-88906","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime","tag-layer-2-solutions","tag-shiba-inu"],"aioseo_notices":[],"amp_enabled":true,"views":"468","promo_type":"1","layout_type":"1","short_excerpt":"A hacker extracted $2.3 million in ETH and SHIB from the Shibarium bridge.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/88906","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=88906"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/88906\/revisions"}],"predecessor-version":[{"id":88908,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/88906\/revisions\/88908"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/88907"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=88906"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=88906"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=88906"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}