Nervos Force Bridge Exploited: $3.9M Stolen

[umair]

On June 2, 2025, Nervos Network's Force Bridge suffered a significant security breach, resulting in the theft of approximately $3.9 million in cryptocurrency. The attacker exploited an access control vulnerability, siphoning assets including 257,800 USDT, 539 ETH, 898,300 USDC, 60,400 DAI, and 0.79 WBTC.

The stolen funds were swiftly converted to Ethereum and laundered through Tornado Cash, a privacy-focused mixer, complicating traceability. In response, Magickbase, a developer associated with Nervos, promptly paused Force Bridge operations and initiated an investigation.

This incident underscores the vulnerabilities inherent in cross-chain bridges, which have become frequent targets for cyberattacks. The crypto community is now calling for enhanced security measures and rigorous audits to protect decentralized finance infrastructure.


Discussion Questions:

What steps can be taken to bolster the security of cross-chain bridges?

How can the crypto industry balance innovation with the need for robust security protocols?