Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Ronin Contract Vulnerability: $12.00M Reported Loss

·Historical incident record

Incident Overview

The Ronin Bridge project experienced unusual cross-chain asset withdrawals, suggesting a potential attack. According to the SlowMist security team, the vulnerability was caused by the modification of weight to an unexpected value, allowing funds to be withdrawn without passing any multi-signature threshold checks. The attacker extracted approximately 4,000 ETH and 2 million USDC from the bridge, amounting to a value of around $12 million. As of August 7th, white hats have returned $12 million worth of assets and received a $500,000 bug bounty.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Nexera

    Attack methodMalware Attack
    Reported loss$ 1,830,000
  2. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 5,000
  3. Incident date
    Target

    Starknet

    Attack methodAccount Compromise
    Reported lossNot disclosed
  4. Incident date
    Target

    Metis

    Attack methodAccount Compromise
    Reported lossNot disclosed
  5. Incident date
    Target

    OMPx

    Attack methodUnknown
    Reported loss$ 107,000