Taiko Bridge Drained $1.7M After SGX Signing Key Left Exposed on GitHub

An attacker forged withdrawal proofs using an RSA-3072 private key accidentally committed to Taiko’s public raiko GitHub repository, draining $1.7 million from L1 bridge contracts and forcing the protocol to halt block production and urge all users to exit.

Loading this article…