Taiko: June Security Incident Caused by Off-Chain Signature Key Leak and Verification Process Omission

Foresight News reports that Ethereum Layer 2 network Taiko has released a review of the security incident on June 21. According to the official statement, the attack originated off-chain, with the attacker forging proofs using leaked signature keys and an unchecked mechanism, bypassing its prover whitelist. Zero-knowledge proof encryption was not affected. The defense mechanisms were effective: the daily limit of the fund bridge slowed down the outflow of funds, and the Security Council suspended the operation of the fund bridge and vault within hours, stopping further fund flows.

Taiko stated that no users suffered any losses. The attacker stole approximately 1.75 million dollars from the cross-chain bridge and vault, but more than 11 million dollars were protected. Since the network recovery, all balances on Taiko have been backed 1:1.