Taiko Bridge Drained $1.7M After SGX Signing Key Left Exposed on GitHub

Stung by a surge in cyberattacks that have run amok in developer environments, GitHub has strengthened the security of actions/checkout to block ‘pwn request’ attacks that exploit insecure use of the pull_request_target workflow trigger to run an attacker’s code with the workflow’s full privileges. Announced on June 18, actions/checkout v7 now automatically blocks and fails workflows when used inside pull_request_target or workflow_run events when attempting to fetch unreviewed fork pull request code. From now on, the only away around these checks will be for developers to implement an opt out by adding an explicit allow-unsafe-pr-checkout to actions/checkout, GitHub said in its V7 changelog. The change signals the beginning of a new ‘secure by default’ era in which security will be defined by the GitHub system rather than being left to discretion of developers. As part of that effort, on July 16, the new defaults will be backported to all supported major versions. “Workflows pinned to

Researchers estimate more than $1.7 million was stolen after attackers allegedly exploited Taiko's proof verification process.

June 22 Taiko bridge exploit drained up to $1.7M, exposing L2 withdrawal UX gaps and proof risks. Practical steps, trade-offs, and red flags to protect exits.

Reports say Taiko faced a $1.7M bridge-related exploit tied to verification issues, putting Ethereum L2 security back in focus.

Attackers stole $1.7 million in the most recent decentralized finance heist this month using an exploit on one of the network’s bridge protocols; Taiko, an Ethereum layer-2 blockchain, has now asked its users to remove assets from the network’s bridges. On Monday, the layer-2 blockchain brought to light a vulnerability

Taiko warns users to withdraw from bridges after a verification compromise and reported ERC20 Vault losses above $1M. Taiko has issued an urgent security warning after confirming a compromise in its chain state verification mechanism.  The project said the issue affects the trust model behind bridges deployed on Taiko. The team warned that users can […] The post Taiko Bridge Security Compromise Triggers Urgent Withdrawal Warning appeared first on Live Bitcoin News.

Ethereum scaling solution Taiko confirmed that its bridge source-signal proof validation mechanism was compromised, allowing hackers to bypass protocols and drain an estimated $1.7 million from its ERC-20 vault. Technical Flaw Leads to $1.7 Million Loss Ethereum scaling solution Taiko confirmed June 22 that its chain state verification mechanism had been compromised. As a consequence, […]

Yet another security incident has been reported today, where popular Ethereum L2 network Taiko was exploited for around $1.7 million.