{"id":92962,"date":"2026-01-09T10:46:45","date_gmt":"2026-01-09T07:46:45","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=92962"},"modified":"2026-01-09T10:50:26","modified_gmt":"2026-01-09T07:50:26","slug":"truebit-token-plummets-after-26-million-hack","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/truebit-token-plummets-after-26-million-hack\/","title":{"rendered":"Truebit Token Plummets After $26 Million Hack"},"content":{"rendered":"<p>On January 8, the Ethereum verification protocol Truebit was attacked, resulting in hackers extracting 8,535 ETH ($26.4 million). This was reported by analysts at Lookonchain.\u00a0<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">It appears Truebit(<a href=\"https:\/\/twitter.com\/Truebitprotocol?ref_src=twsrc%5Etfw\">@Truebitprotocol<\/a>) has been exploited, with 8,535 <a href=\"https:\/\/twitter.com\/search?q=%24ETH&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$ETH<\/a> ($26.44M) stolen. \ud83d\udea8<a href=\"https:\/\/t.co\/jvj8lVkfTM\">https:\/\/t.co\/jvj8lVkfTM<\/a> <a href=\"https:\/\/t.co\/22Q58vdzvN\">pic.twitter.com\/22Q58vdzvN<\/a><\/p>\n<p>\u2014 Lookonchain (@lookonchain) <a href=\"https:\/\/twitter.com\/lookonchain\/status\/2009303499927154909?ref_src=twsrc%5Etfw\">January 8, 2026<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>The project team <a href=\"https:\/\/x.com\/Truebitprotocol\/status\/2009328032813850839\">confirmed<\/a> the breach, noting that only one smart contract was affected. The developers have yet to disclose the causes of the incident and the amount of damage, as the investigation is ongoing.\u00a0<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>\u201cWe are in contact with law enforcement and are taking all available measures to address the situation,\u201d noted Truebit.\u00a0<\/em><\/p>\n<\/blockquote>\n<p>Independent researcher Weilin (William) Li suggested that the attackers exploited a vulnerability in the token minting function with an incorrectly set price in an outdated contract deployed about five years ago.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">Another 26M hack. <a href=\"https:\/\/twitter.com\/Truebitprtocol?ref_src=twsrc%5Etfw\">@Truebitprtocol<\/a><\/p>\n<p>I haven&#8217;t decompiled the vulnerable code yet, but the root cause appears to be a mispriced minting function of its purchase contract that allows anyone to purchase TRU token at a very low price. <\/p>\n<p>The first attacker (26M profit):\u2026 <a href=\"https:\/\/t.co\/qmoDB54I0w\">pic.twitter.com\/qmoDB54I0w<\/a><\/p>\n<p>\u2014 Weilin (William) Li (@hklst4r) <a href=\"https:\/\/twitter.com\/hklst4r\/status\/2009314260460146917?ref_src=twsrc%5Etfw\">January 8, 2026<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>The attackers managed to purchase native TRU coins at an artificially low rate.\u00a0<\/p>\n<p>The expert believes that two independent groups were involved in the hack: the first gained a profit of $26 million, while the second made around $250,000.\u00a0<\/p>\n<p>The TRU token has nearly lost its value \u2014 within 24 hours, its price plummeted by approximately 100%. At the time of writing, the coin is trading at around $0.00007212.\u00a0<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"556\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/img-150c41ab1c0f2096-3161053464563996-1024x556.png\" alt=\"image\" class=\"wp-image-273065\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/img-150c41ab1c0f2096-3161053464563996-1024x556.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/img-150c41ab1c0f2096-3161053464563996-300x163.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/img-150c41ab1c0f2096-3161053464563996-768x417.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/img-150c41ab1c0f2096-3161053464563996-1536x833.png 1536w, https:\/\/forklog.com\/wp-content\/uploads\/img-150c41ab1c0f2096-3161053464563996.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Source: <a href=\"https:\/\/www.coingecko.com\/en\/coins\/truebit-protocol\">CoinGecko<\/a>.\u00a0<\/figcaption><\/figure>\n<p>In late December, the browser extension Trust Wallet <a href=\"https:\/\/forklog.com\/en\/news\/trust-wallet-users-suffer-7-million-hack\">was subjected<\/a> to a hack amounting to $8.5 million. The project team <a href=\"https:\/\/forklog.com\/en\/news\/trust-wallet-reveals-details-of-8-5-million-hack\">stated<\/a> that the breach affected 2,520 addresses.\u00a0<\/p>\n<p>Almost simultaneously, the DeFi protocol Unleash Protocol <a href=\"https:\/\/forklog.com\/en\/news\/unleash-protocol-loses-3-9-million-in-hack\">fell victim<\/a> to cybercriminals, with attackers withdrawing around $3.9 million.\u00a0<\/p>\n<p>By the end of 2025, the damage from hacks <a href=\"https:\/\/forklog.com\/en\/news\/losses-from-crypto-hacks-reached-3-4bn-in-2025\">reached<\/a> $3.4 billion, with the majority of this sum attributed to hackers from North Korea.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On January 8, the Ethereum verification protocol Truebit was attacked, resulting in hackers extracting 8,535 ETH ($26.4 million). This was reported by analysts at Lookonchain.<\/p>\n","protected":false},"author":1,"featured_media":92963,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"Truebit protocol hacked, losing 8,535 ETH ($26.4M); TRU token value plummets.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154,44,46],"class_list":["post-92962","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes","tag-cybercrime","tag-ethereum"],"aioseo_notices":[],"amp_enabled":true,"views":"165","promo_type":"1","layout_type":"1","short_excerpt":"Truebit protocol hacked, losing 8,535 ETH ($26.4M); TRU token value plummets.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/92962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=92962"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/92962\/revisions"}],"predecessor-version":[{"id":92964,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/92962\/revisions\/92964"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/92963"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=92962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=92962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=92962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}