An attacker stole $11.6&nbsp;million in various crypto assets from the Verus–Ethereum <button class="define-target" id="bridge">bridge</button>, which allows users to use tokens from the Verus network on the Ethereum chain and vice versa. The attacker then swapped the tokens for ETH, limiting the ability for issuers of more centralized tokens to freeze the stolen assets.<p>Verus halted the entire Verus network after the exploit was detected in hopes of limiting further damage.</p>

"Ongoing exploit drains $11.6 million from Verus-Ethereum bridge: Blockaid"

Verus bridge hack

Verus bridge hacked for $11.6&nbsp;million

The THORchain cross-chain liquidity protocol was exploited for around $10.8&nbsp;million across several blockchains: Bitcoin, Ethereum, BNB Chain, and Base. The protocol paused trading after observing the suspicious transactions. News of the hack caused the protocol's RUNE token to drop in price by more than 10%.

Thorchain exploit

THORchain exploited for $10.8&nbsp;million

TrustedVolumes, a resolver and market maker used by 1inch and other defi platforms, suffered a $6.7&nbsp;million exploit after an attacker was able to steal funds without proper validation. The thief then swapped the stolen <button class="define-target" id="wrapped-token">w</button>ETH, USDT, wBTC, and USDC through ChangeNow and converted them to ETH to evade <button class="define-target" id="freezing">freezes</button>.<p>Blockchain research firm Blockaid has linked the attacker to a <a href="https://www.web3isgoinggreat.com/?id=1inch-loses-5-million-to-smart-contract-bug" target="_blank">similar exploit in March 2025</a> that saw $5&nbsp;million drained from 1inch. This time, 1inch has asserted that although they use TrustedVolumes as a resolver, the exploit did not involve any of their systems.</p>

"DeFi Platform TrustedVolumes Hit by $6.7M Exploit"

TrustedVolumes exploit

TrustedVolumes suffers $6.7&nbsp;million exploit

The TAC bridge, which bridges assets from the Ethereum blockchain to the Telegram-linked TON chain, was exploited for $2.8&nbsp;million. The project paused the bridge and announced they were investigating.<p>The project has announced they intend to "restor[e] bridge liquidity through a legally structured sale of Foundation's TAC token treasury reserves."</p>

TAC bridge exploit

TAC bridge exploited for $2.8&nbsp;million

Transit Finance was exploited for $1.88&nbsp;million after an attacker exploited a "legacy contract" on the TRON blockchain that the project said was deprecated in 2022. "Historical vulnerabilities within it" were exploited, the project explained, allowing the attacker to steal $1.88&nbsp;million.<p>Transit was <a href="https://www.web3isgoinggreat.com/?id=transit-swap-hacked-for-21-million-hacker-returns-large-portion" target="_blank">previously exploited in 2022</a> for $21&nbsp;million, although around 70% of the stolen assets were later returned.</p>

Transit Finance hack

Transit Finance hacked for $1.88&nbsp;million

The Ekubo automated market maker infrastructure project experienced a $1.4&nbsp;million theft after attackers were able to take advantage of a <button class="define-target" id="smart-contract">smart contract</button> that improperly verified permissions. They stole 17&nbsp;<button class="define-target" id="wrapped-token">w</button>BTC ($1.4&nbsp;million), which they swapped for ETH and laundered via Tornado Cash.

"Attackers drain $1.4M in wrapped bitcoin from DeFi protocol Ekubo in approval-based exploit"

Event	Date	Amount More info
Verus bridge hack	May 17, 2026	$11,600,000
Thorchain exploit	May 15, 2026	$10,800,000
TrustedVolumes exploit	May 6, 2026	$6,700,000
TAC bridge exploit	May 12, 2026	$2,800,000
Transit Finance hack	May 13, 2026	$1,880,000
Ekubo exploit	May 5, 2026	$1,400,000